@mitre/hdf-converters 2.6.18 → 2.6.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (70) hide show
  1. package/lib/index.d.ts +7 -0
  2. package/lib/index.js +20 -0
  3. package/lib/index.js.map +1 -1
  4. package/lib/package.json +1 -1
  5. package/lib/src/asff-mapper.d.ts +20 -10
  6. package/lib/src/asff-mapper.js +481 -173
  7. package/lib/src/asff-mapper.js.map +1 -1
  8. package/lib/src/base-converter.d.ts +5 -4
  9. package/lib/src/base-converter.js +41 -22
  10. package/lib/src/base-converter.js.map +1 -1
  11. package/lib/src/converters-from-hdf/asff/transformers.d.ts +1 -1
  12. package/lib/src/converters-from-hdf/asff/transformers.js +66 -64
  13. package/lib/src/converters-from-hdf/asff/transformers.js.map +1 -1
  14. package/lib/src/converters-from-hdf/reverse-any-base-converter.d.ts +2 -2
  15. package/lib/src/converters-from-hdf/reverse-any-base-converter.js.map +1 -1
  16. package/lib/src/converters-from-hdf/reverse-base-converter.d.ts +2 -2
  17. package/lib/src/converters-from-hdf/reverse-base-converter.js.map +1 -1
  18. package/lib/src/mappings/AwsConfigMapping.js +2 -2
  19. package/lib/src/mappings/AwsConfigMapping.js.map +1 -1
  20. package/lib/src/mappings/AwsConfigMappingData.d.ts +6 -0
  21. package/lib/src/mappings/AwsConfigMappingData.js +642 -0
  22. package/lib/src/mappings/AwsConfigMappingData.js.map +1 -0
  23. package/lib/src/mappings/CciNistMapping.js +3 -6
  24. package/lib/src/mappings/CciNistMapping.js.map +1 -1
  25. package/lib/src/mappings/CciNistMappingData.d.ts +5100 -0
  26. package/lib/src/mappings/CciNistMappingData.js +5104 -0
  27. package/lib/src/mappings/CciNistMappingData.js.map +1 -0
  28. package/lib/src/mappings/CweNistMapping.js +3 -6
  29. package/lib/src/mappings/CweNistMapping.js.map +1 -1
  30. package/lib/src/mappings/CweNistMappingData.d.ts +7 -0
  31. package/lib/src/mappings/CweNistMappingData.js +1420 -0
  32. package/lib/src/mappings/CweNistMappingData.js.map +1 -0
  33. package/lib/src/mappings/NessusPluginNistMappingData.d.ts +9 -0
  34. package/lib/src/mappings/NessusPluginNistMappingData.js +436 -0
  35. package/lib/src/mappings/NessusPluginNistMappingData.js.map +1 -0
  36. package/lib/src/mappings/NessusPluginsNistMapping.d.ts +0 -1
  37. package/lib/src/mappings/NessusPluginsNistMapping.js +3 -9
  38. package/lib/src/mappings/NessusPluginsNistMapping.js.map +1 -1
  39. package/lib/src/mappings/NessusPluginsNistMappingItem.d.ts +0 -1
  40. package/lib/src/mappings/NessusPluginsNistMappingItem.js +0 -6
  41. package/lib/src/mappings/NessusPluginsNistMappingItem.js.map +1 -1
  42. package/lib/src/mappings/NiktoNistMapping.d.ts +0 -3
  43. package/lib/src/mappings/NiktoNistMapping.js +4 -18
  44. package/lib/src/mappings/NiktoNistMapping.js.map +1 -1
  45. package/lib/src/mappings/NiktoNistMappingData.d.ts +8943 -0
  46. package/lib/src/mappings/NiktoNistMappingData.js +8947 -0
  47. package/lib/src/mappings/NiktoNistMappingData.js.map +1 -0
  48. package/lib/src/mappings/OWaspNistMappingData.d.ts +7 -0
  49. package/lib/src/mappings/OWaspNistMappingData.js +76 -0
  50. package/lib/src/mappings/OWaspNistMappingData.js.map +1 -0
  51. package/lib/src/mappings/OwaspNistMapping.js +3 -6
  52. package/lib/src/mappings/OwaspNistMapping.js.map +1 -1
  53. package/lib/src/mappings/ScoutsuiteNistMapping.js +3 -6
  54. package/lib/src/mappings/ScoutsuiteNistMapping.js.map +1 -1
  55. package/lib/src/mappings/ScoutsuiteNistMappingData.d.ts +4 -0
  56. package/lib/src/mappings/ScoutsuiteNistMappingData.js +562 -0
  57. package/lib/src/mappings/ScoutsuiteNistMappingData.js.map +1 -0
  58. package/lib/src/sonarqube-mapper.js +1 -1
  59. package/lib/src/sonarqube-mapper.js.map +1 -1
  60. package/package.json +1 -1
  61. package/lib/data/aws-config-mapping.json +0 -638
  62. package/lib/data/cci-nist-mapping.json +0 -5100
  63. package/lib/data/cwe-nist-mapping.json +0 -1416
  64. package/lib/data/nessus-plugins-nist-mapping.json +0 -644
  65. package/lib/data/nikto-nist-mapping.json +0 -53648
  66. package/lib/data/owasp-nist-mapping.json +0 -72
  67. package/lib/data/scoutsuite-nist-mapping.json +0 -558
  68. package/lib/src/mappings/AwsConfigMappingItem.d.ts +0 -7
  69. package/lib/src/mappings/AwsConfigMappingItem.js +0 -28
  70. package/lib/src/mappings/AwsConfigMappingItem.js.map +0 -1
@@ -1,638 +0,0 @@
1
- [
2
- {
3
- "AwsConfigRuleSourceIdentifier": "SECRETSMANAGER_SCHEDULED_ROTATION_SUCCESS_CHECK",
4
- "AwsConfigRuleName": "secretsmanager-scheduled-rotation-success-check",
5
- "NIST-ID": "AC-2(1)|AC-2(j)",
6
- "Rev": 4
7
- },
8
- {
9
- "AwsConfigRuleSourceIdentifier": "IAM_USER_GROUP_MEMBERSHIP_CHECK",
10
- "AwsConfigRuleName": "iam-user-group-membership-check",
11
- "NIST-ID": "AC-2(1)|AC-2(j)|AC-3|AC-6",
12
- "Rev": 4
13
- },
14
- {
15
- "AwsConfigRuleSourceIdentifier": "IAM_PASSWORD_POLICY",
16
- "AwsConfigRuleName": "iam-password-policy",
17
- "NIST-ID": "AC-2(1)|AC-2(f)|AC-2(j)|IA-2|IA-5(1)(a)(d)(e)|IA-5(4)",
18
- "Rev": 4
19
- },
20
- {
21
- "AwsConfigRuleSourceIdentifier": "ACCESS_KEYS_ROTATED",
22
- "AwsConfigRuleName": "access-keys-rotated",
23
- "NIST-ID": "AC-2(1)|AC-2(j)",
24
- "Rev": 4
25
- },
26
- {
27
- "AwsConfigRuleSourceIdentifier": "IAM_USER_UNUSED_CREDENTIALS_CHECK",
28
- "AwsConfigRuleName": "iam-user-unused-credentials-check",
29
- "NIST-ID": "AC-2(1)|AC-2(3)|AC-2(f)|AC-3|AC-6",
30
- "Rev": 4
31
- },
32
- {
33
- "AwsConfigRuleSourceIdentifier": "SECURITYHUB_ENABLED",
34
- "AwsConfigRuleName": "securityhub-enabled",
35
- "NIST-ID": "AC-2(1)|AC-2(4)|AC-2(12)(a)|AC-2(g)|AC-17(1)|AU-6(1)(3)|CA-7(a)(b)|SA-10|SI-4(2)|SI-4(4)|SI-4(5)|SI-4(16)|SI-4(a)(b)(c)",
36
- "Rev": 4
37
- },
38
- {
39
- "AwsConfigRuleSourceIdentifier": "GUARDDUTY_ENABLED_CENTRALIZED",
40
- "AwsConfigRuleName": "guardduty-enabled-centralized",
41
- "NIST-ID": "AC-2(1)|AC-2(4)|AC-2(12)(a)|AC-2(g)|AC-17(1)|AU-6(1)(3)|CA-7(a)(b)|RA-5|SA-10|SI-4(1)|SI-4(2)|SI-4(4)|SI-4(5)|SI-4(16)|SI-4(a)(b)(c)",
42
- "Rev": 4
43
- },
44
- {
45
- "AwsConfigRuleSourceIdentifier": "CLOUD_TRAIL_CLOUD_WATCH_LOGS_ENABLED",
46
- "AwsConfigRuleName": "cloud-trail-cloud-watch-logs-enabled",
47
- "NIST-ID": "AC-2(4)|AC-2(g)|AU-2(a)(d)|AU-3|AU-6(1)(3)|AU-7(1)|AU-12(a)(c)|CA-7(a)(b)|SI-4(2)|SI-4(4)|SI-4(5)|SI-4(a)(b)(c)",
48
- "Rev": 4
49
- },
50
- {
51
- "AwsConfigRuleSourceIdentifier": "CLOUD_TRAIL_ENABLED",
52
- "AwsConfigRuleName": "cloudtrail-enabled",
53
- "NIST-ID": "AC-2(4)|AC-2(g)|AU-2(a)(d)|AU-3|AU-12(a)(c)",
54
- "Rev": 4
55
- },
56
- {
57
- "AwsConfigRuleSourceIdentifier": "MULTI_REGION_CLOUD_TRAIL_ENABLED",
58
- "AwsConfigRuleName": "multi-region-cloudtrail-enabled",
59
- "NIST-ID": "AC-2(4)|AU-2(a)(d)|AU-3|AU-12(a)(c)",
60
- "Rev": 4
61
- },
62
- {
63
- "AwsConfigRuleSourceIdentifier": "RDS_LOGGING_ENABLED",
64
- "AwsConfigRuleName": "rds-logging-enabled",
65
- "NIST-ID": "AC-2(4)|AC-2(g)|AU-2(a)(d)|AU-3|AU-12(a)(c)",
66
- "Rev": 4
67
- },
68
- {
69
- "AwsConfigRuleSourceIdentifier": "CLOUDWATCH_ALARM_ACTION_CHECK",
70
- "AwsConfigRuleName": "cloudwatch-alarm-action-check",
71
- "NIST-ID": "AC-2(4)|AU-6(1)(3)|AU-7(1)|CA-7(a)(b)|IR-4(1)|SI-4(2)|SI-4(4)|SI-4(5)|SI-4(a)(b)(c)",
72
- "Rev": 4
73
- },
74
- {
75
- "AwsConfigRuleSourceIdentifier": "REDSHIFT_CLUSTER_CONFIGURATION_CHECK",
76
- "AwsConfigRuleName": "redshift-cluster-configuration-check",
77
- "NIST-ID": "AC-2(4)|AC-2(g)|AU-2(a)(d)|AU-3|AU-12(a)(c)|SC-13|SC-28",
78
- "Rev": 4
79
- },
80
- {
81
- "AwsConfigRuleSourceIdentifier": "IAM_ROOT_ACCESS_KEY_CHECK",
82
- "AwsConfigRuleName": "iam-root-access-key-check",
83
- "NIST-ID": "AC-2(f)|AC-2(j)|AC-3|AC-6|AC-6(10)",
84
- "Rev": 4
85
- },
86
- {
87
- "AwsConfigRuleSourceIdentifier": "S3_BUCKET_LOGGING_ENABLED",
88
- "AwsConfigRuleName": "s3-bucket-logging-enabled",
89
- "NIST-ID": "AC-2(g)|AU-2(a)(d)|AU-3|AU-12(a)(c)",
90
- "Rev": 4
91
- },
92
- {
93
- "AwsConfigRuleSourceIdentifier": "CLOUDTRAIL_S3_DATAEVENTS_ENABLED",
94
- "AwsConfigRuleName": "cloudtrail-s3-dataevents-enabled",
95
- "NIST-ID": "AC-2(g)|AU-2(a)(d)|AU-3|AU-12(a)(c)",
96
- "Rev": 4
97
- },
98
- {
99
- "AwsConfigRuleSourceIdentifier": "ROOT_ACCOUNT_MFA_ENABLED",
100
- "AwsConfigRuleName": "root-account-mfa-enabled",
101
- "NIST-ID": "AC-2(j)|IA-2(1)(11)",
102
- "Rev": 4
103
- },
104
- {
105
- "AwsConfigRuleSourceIdentifier": "EMR_KERBEROS_ENABLED",
106
- "AwsConfigRuleName": "emr-kerberos-enabled",
107
- "NIST-ID": "AC-2(j)|AC-3|AC-5(c)|AC-6",
108
- "Rev": 4
109
- },
110
- {
111
- "AwsConfigRuleSourceIdentifier": "IAM_GROUP_HAS_USERS_CHECK",
112
- "AwsConfigRuleName": "iam-group-has-users-check",
113
- "NIST-ID": "AC-2(j)|AC-3|AC-5(c)|AC-6|SC-2",
114
- "Rev": 4
115
- },
116
- {
117
- "AwsConfigRuleSourceIdentifier": "IAM_POLICY_NO_STATEMENTS_WITH_ADMIN_ACCESS",
118
- "AwsConfigRuleName": "iam-policy-no-statements-with-admin-access",
119
- "NIST-ID": "AC-2(j)|AC-3|AC-5(c)|AC-6|SC-2",
120
- "Rev": 4
121
- },
122
- {
123
- "AwsConfigRuleSourceIdentifier": "IAM_USER_NO_POLICIES_CHECK",
124
- "AwsConfigRuleName": "iam-user-no-policies-check",
125
- "NIST-ID": "AC-2(j)|AC-3|AC-5(c)|AC-6",
126
- "Rev": 4
127
- },
128
- {
129
- "AwsConfigRuleSourceIdentifier": "S3_BUCKET_PUBLIC_WRITE_PROHIBITED",
130
- "AwsConfigRuleName": "s3-bucket-public-write-prohibited",
131
- "NIST-ID": "AC-3|AC-4|AC-6|AC-21(b)|SC-7|SC-7(3)",
132
- "Rev": 4
133
- },
134
- {
135
- "AwsConfigRuleSourceIdentifier": "LAMBDA_FUNCTION_PUBLIC_ACCESS_PROHIBITED",
136
- "AwsConfigRuleName": "lambda-function-public-access-prohibited",
137
- "NIST-ID": "AC-3|AC-4|AC-6|AC-21(b)|SC-7|SC-7(3)",
138
- "Rev": 4
139
- },
140
- {
141
- "AwsConfigRuleSourceIdentifier": "RDS_SNAPSHOTS_PUBLIC_PROHIBITED",
142
- "AwsConfigRuleName": "rds-snapshots-public-prohibited",
143
- "NIST-ID": "AC-3|AC-4|AC-6|AC-21(b)|SC-7|SC-7(3)",
144
- "Rev": 4
145
- },
146
- {
147
- "AwsConfigRuleSourceIdentifier": "REDSHIFT_CLUSTER_PUBLIC_ACCESS_CHECK",
148
- "AwsConfigRuleName": "redshift-cluster-public-access-check",
149
- "NIST-ID": "AC-3|AC-4|AC-6|AC-21(b)|SC-7|SC-7(3)",
150
- "Rev": 4
151
- },
152
- {
153
- "AwsConfigRuleSourceIdentifier": "S3_BUCKET_POLICY_GRANTEE_CHECK",
154
- "AwsConfigRuleName": "s3-bucket-policy-grantee-check",
155
- "NIST-ID": "AC-3|AC-6|SC-7|SC-7(3)",
156
- "Rev": 4
157
- },
158
- {
159
- "AwsConfigRuleSourceIdentifier": "S3_BUCKET_PUBLIC_READ_PROHIBITED",
160
- "AwsConfigRuleName": "s3-bucket-public-read-prohibited",
161
- "NIST-ID": "AC-3|AC-4|AC-6|AC-21(b)|SC-7|SC-7(3)",
162
- "Rev": 4
163
- },
164
- {
165
- "AwsConfigRuleSourceIdentifier": "S3_ACCOUNT_LEVEL_PUBLIC_ACCESS_BLOCKS",
166
- "AwsConfigRuleName": "s3-account-level-public-access-blocks",
167
- "NIST-ID": "AC-3|AC-4|AC-6|AC-21(b)|SC-7|SC-7(3)",
168
- "Rev": 4
169
- },
170
- {
171
- "AwsConfigRuleSourceIdentifier": "DMS_REPLICATION_NOT_PUBLIC",
172
- "AwsConfigRuleName": "dms-replication-not-public",
173
- "NIST-ID": "AC-3|AC-4|AC-6|AC-21(b)|SC-7|SC-7(3)",
174
- "Rev": 4
175
- },
176
- {
177
- "AwsConfigRuleSourceIdentifier": "EBS_SNAPSHOT_PUBLIC_RESTORABLE_CHECK",
178
- "AwsConfigRuleName": "ebs-snapshot-public-restorable-check",
179
- "NIST-ID": "AC-3|AC-4|AC-6|AC-21(b)|SC-7|SC-7(3)",
180
- "Rev": 4
181
- },
182
- {
183
- "AwsConfigRuleSourceIdentifier": "SAGEMAKER_NOTEBOOK_NO_DIRECT_INTERNET_ACCESS",
184
- "AwsConfigRuleName": "sagemaker-notebook-no-direct-internet-access",
185
- "NIST-ID": "AC-3|AC-4|AC-6|AC-21(b)|SC-7|SC-7(3)",
186
- "Rev": 4
187
- },
188
- {
189
- "AwsConfigRuleSourceIdentifier": "RDS_INSTANCE_PUBLIC_ACCESS_CHECK",
190
- "AwsConfigRuleName": "rds-instance-public-access-check",
191
- "NIST-ID": "AC-4|AC-6|AC-21(b)|SC-7|SC-7(3)",
192
- "Rev": 4
193
- },
194
- {
195
- "AwsConfigRuleSourceIdentifier": "LAMBDA_INSIDE_VPC",
196
- "AwsConfigRuleName": "lambda-inside-vpc",
197
- "NIST-ID": "AC-4|SC-7|SC-7(3)",
198
- "Rev": 4
199
- },
200
- {
201
- "AwsConfigRuleSourceIdentifier": "INSTANCES_IN_VPC",
202
- "AwsConfigRuleName": "ec2-instances-in-vpc",
203
- "NIST-ID": "AC-4|SC-7|SC-7(3)",
204
- "Rev": 4
205
- },
206
- {
207
- "AwsConfigRuleSourceIdentifier": "RESTRICTED_INCOMING_TRAFFIC",
208
- "AwsConfigRuleName": "restricted-common-ports",
209
- "NIST-ID": "AC-4|CM-2|SC-7|SC-7(3)",
210
- "Rev": 4
211
- },
212
- {
213
- "AwsConfigRuleSourceIdentifier": "INCOMING_SSH_DISABLED",
214
- "AwsConfigRuleName": "restricted-ssh",
215
- "NIST-ID": "AC-4|SC-7|SC-7(3)",
216
- "Rev": 4
217
- },
218
- {
219
- "AwsConfigRuleSourceIdentifier": "VPC_DEFAULT_SECURITY_GROUP_CLOSED",
220
- "AwsConfigRuleName": "vpc-default-security-group-closed",
221
- "NIST-ID": "AC-4|SC-7|SC-7(3)",
222
- "Rev": 4
223
- },
224
- {
225
- "AwsConfigRuleSourceIdentifier": "VPC_SG_OPEN_ONLY_TO_AUTHORIZED_PORTS",
226
- "AwsConfigRuleName": "vpc-sg-open-only-to-authorized-ports",
227
- "NIST-ID": "AC-4|SC-7|SC-7(3)",
228
- "Rev": 4
229
- },
230
- {
231
- "AwsConfigRuleSourceIdentifier": "ACM_CERTIFICATE_EXPIRATION_CHECK",
232
- "AwsConfigRuleName": "acm-certificate-expiration-check",
233
- "NIST-ID": "AC-4|AC-17(2)|SC-12",
234
- "Rev": 4
235
- },
236
- {
237
- "AwsConfigRuleSourceIdentifier": "EC2_INSTANCE_NO_PUBLIC_IP",
238
- "AwsConfigRuleName": "ec2-instance-no-public-ip",
239
- "NIST-ID": "AC-4|AC-6|AC-21(b)|SC-7|SC-7(3)",
240
- "Rev": 4
241
- },
242
- {
243
- "AwsConfigRuleSourceIdentifier": "ELASTICSEARCH_IN_VPC_ONLY",
244
- "AwsConfigRuleName": "elasticsearch-in-vpc-only",
245
- "NIST-ID": "AC-4|SC-7|SC-7(3)",
246
- "Rev": 4
247
- },
248
- {
249
- "AwsConfigRuleSourceIdentifier": "EMR_MASTER_NO_PUBLIC_IP",
250
- "AwsConfigRuleName": "emr-master-no-public-ip",
251
- "NIST-ID": "AC-4|AC-21(b)|SC-7|SC-7(3)",
252
- "Rev": 4
253
- },
254
- {
255
- "AwsConfigRuleSourceIdentifier": "INTERNET_GATEWAY_AUTHORIZED_VPC_ONLY",
256
- "AwsConfigRuleName": "internet-gateway-authorized-vpc-only",
257
- "NIST-ID": "AC-4|AC-17(3)|SC-7|SC-7(3)",
258
- "Rev": 4
259
- },
260
- {
261
- "AwsConfigRuleSourceIdentifier": "CODEBUILD_PROJECT_ENVVAR_AWSCRED_CHECK",
262
- "AwsConfigRuleName": "codebuild-project-envvar-awscred-check",
263
- "NIST-ID": "AC-6|IA-5(7)|SA-3(a)",
264
- "Rev": 4
265
- },
266
- {
267
- "AwsConfigRuleSourceIdentifier": "EC2_IMDSV2_CHECK",
268
- "AwsConfigRuleName": "ec2-imdsv2-check",
269
- "NIST-ID": "AC-6",
270
- "Rev": 4
271
- },
272
- {
273
- "AwsConfigRuleSourceIdentifier": "IAM_NO_INLINE_POLICY_CHECK",
274
- "AwsConfigRuleName": "iam-no-inline-policy-check",
275
- "NIST-ID": "AC-6",
276
- "Rev": 4
277
- },
278
- {
279
- "AwsConfigRuleSourceIdentifier": "ALB_HTTP_TO_HTTPS_REDIRECTION_CHECK",
280
- "AwsConfigRuleName": "alb-http-to-https-redirection-check",
281
- "NIST-ID": "AC-17(2)|SC-7|SC-8|SC-8(1)|SC-13|SC-23",
282
- "Rev": 4
283
- },
284
- {
285
- "AwsConfigRuleSourceIdentifier": "REDSHIFT_REQUIRE_TLS_SSL",
286
- "AwsConfigRuleName": "redshift-require-tls-ssl",
287
- "NIST-ID": "AC-17(2)|SC-7|SC-8|SC-8(1)|SC-13",
288
- "Rev": 4
289
- },
290
- {
291
- "AwsConfigRuleSourceIdentifier": "S3_BUCKET_SSL_REQUESTS_ONLY",
292
- "AwsConfigRuleName": "s3-bucket-ssl-requests-only",
293
- "NIST-ID": "AC-17(2)|SC-7|SC-8|SC-8(1)|SC-13",
294
- "Rev": 4
295
- },
296
- {
297
- "AwsConfigRuleSourceIdentifier": "ELB_ACM_CERTIFICATE_REQUIRED",
298
- "AwsConfigRuleName": "elb-acm-certificate-required",
299
- "NIST-ID": "AC-17(2)|SC-7|SC-8|SC-8(1)|SC-13",
300
- "Rev": 4
301
- },
302
- {
303
- "AwsConfigRuleSourceIdentifier": "ALB_HTTP_DROP_INVALID_HEADER_ENABLED",
304
- "AwsConfigRuleName": "alb-http-drop-invalid-header-enabled",
305
- "NIST-ID": "AC-17(2)|SC-7|SC-8|SC-8(1)|SC-23",
306
- "Rev": 4
307
- },
308
- {
309
- "AwsConfigRuleSourceIdentifier": "ELB_TLS_HTTPS_LISTENERS_ONLY",
310
- "AwsConfigRuleName": "elb-tls-https-listeners-only",
311
- "NIST-ID": "AC-17(2)|SC-7|SC-8|SC-8(1)|SC-23",
312
- "Rev": 4
313
- },
314
- {
315
- "AwsConfigRuleSourceIdentifier": "API_GW_EXECUTION_LOGGING_ENABLED",
316
- "AwsConfigRuleName": "api-gw-execution-logging-enabled",
317
- "NIST-ID": "AU-2(a)(d)|AU-3|AU-12(a)(c)",
318
- "Rev": 4
319
- },
320
- {
321
- "AwsConfigRuleSourceIdentifier": "ELB_LOGGING_ENABLED",
322
- "AwsConfigRuleName": "elb-logging-enabled",
323
- "NIST-ID": "AU-2(a)(d)|AU-3|AU-12(a)(c)",
324
- "Rev": 4
325
- },
326
- {
327
- "AwsConfigRuleSourceIdentifier": "VPC_FLOW_LOGS_ENABLED",
328
- "AwsConfigRuleName": "vpc-flow-logs-enabled",
329
- "NIST-ID": "AU-2(a)(d)|AU-3|AU-12(a)(c)",
330
- "Rev": 4
331
- },
332
- {
333
- "AwsConfigRuleSourceIdentifier": "WAFV2_LOGGING_ENABLED",
334
- "AwsConfigRuleName": "wafv2-logging-enabled",
335
- "NIST-ID": "AU-2(a)(d)|AU-3|AU-12(a)(c)|SC-7|SI-4(a)(b)(c)",
336
- "Rev": 4
337
- },
338
- {
339
- "AwsConfigRuleSourceIdentifier": "CLOUD_TRAIL_ENCRYPTION_ENABLED",
340
- "AwsConfigRuleName": "cloud-trail-encryption-enabled",
341
- "NIST-ID": "AU-9|SC-13|SC-28",
342
- "Rev": 4
343
- },
344
- {
345
- "AwsConfigRuleSourceIdentifier": "CLOUDWATCH_LOG_GROUP_ENCRYPTED",
346
- "AwsConfigRuleName": "cloudwatch-log-group-encrypted",
347
- "NIST-ID": "AU-9|SC-13|SC-28",
348
- "Rev": 4
349
- },
350
- {
351
- "AwsConfigRuleSourceIdentifier": "S3_BUCKET_REPLICATION_ENABLED",
352
- "AwsConfigRuleName": "s3-bucket-replication-enabled",
353
- "NIST-ID": "AU-9(2)|CP-9(b)|CP-10|SC-5|SC-36",
354
- "Rev": 4
355
- },
356
- {
357
- "AwsConfigRuleSourceIdentifier": "CW_LOGGROUP_RETENTION_PERIOD_CHECK",
358
- "AwsConfigRuleName": "cw-loggroup-retention-period-check",
359
- "NIST-ID": "AU-11|SI-12",
360
- "Rev": 4
361
- },
362
- {
363
- "AwsConfigRuleSourceIdentifier": "EC2_INSTANCE_DETAILED_MONITORING_ENABLED",
364
- "AwsConfigRuleName": "ec2-instance-detailed-monitoring-enabled",
365
- "NIST-ID": "CA-7(a)(b)|SI-4(2)|SI-4(a)(b)(c)",
366
- "Rev": 4
367
- },
368
- {
369
- "AwsConfigRuleSourceIdentifier": "RDS_ENHANCED_MONITORING_ENABLED",
370
- "AwsConfigRuleName": "rds-enhanced-monitoring-enabled",
371
- "NIST-ID": "CA-7(a)(b)",
372
- "Rev": 4
373
- },
374
- {
375
- "AwsConfigRuleSourceIdentifier": "EC2_INSTANCE_MANAGED_BY_SSM",
376
- "AwsConfigRuleName": "ec2-instance-managed-by-systems-manager",
377
- "NIST-ID": "CM-2|CM-7(a)|CM-8(1)|CM-8(3)(a)|SA-3(a)|SA-10|SI-2(2)|SI-7(1)",
378
- "Rev": 4
379
- },
380
- {
381
- "AwsConfigRuleSourceIdentifier": "EC2_MANAGEDINSTANCE_ASSOCIATION_COMPLIANCE_STATUS_CHECK",
382
- "AwsConfigRuleName": "ec2-managedinstance-association-compliance-status-check",
383
- "NIST-ID": "CM-2|CM-7(a)|CM-8(3)(a)|SI-2(2)",
384
- "Rev": 4
385
- },
386
- {
387
- "AwsConfigRuleSourceIdentifier": "EC2_STOPPED_INSTANCE",
388
- "AwsConfigRuleName": "ec2-stopped-instance",
389
- "NIST-ID": "CM-2",
390
- "Rev": 4
391
- },
392
- {
393
- "AwsConfigRuleSourceIdentifier": "EC2_VOLUME_INUSE_CHECK",
394
- "AwsConfigRuleName": "ec2-volume-inuse-check",
395
- "NIST-ID": "CM-2|SC-4",
396
- "Rev": 4
397
- },
398
- {
399
- "AwsConfigRuleSourceIdentifier": "ELB_DELETION_PROTECTION_ENABLED",
400
- "AwsConfigRuleName": "elb-deletion-protection-enabled",
401
- "NIST-ID": "CM-2|CP-10",
402
- "Rev": 4
403
- },
404
- {
405
- "AwsConfigRuleSourceIdentifier": "CLOUDTRAIL_SECURITY_TRAIL_ENABLED",
406
- "AwsConfigRuleName": "cloudtrail-security-trail-enabled",
407
- "NIST-ID": "CM-2",
408
- "Rev": 4
409
- },
410
- {
411
- "AwsConfigRuleSourceIdentifier": "EC2_MANAGEDINSTANCE_PATCH_COMPLIANCE_STATUS_CHECK",
412
- "AwsConfigRuleName": "ec2-managedinstance-patch-compliance-status-check",
413
- "NIST-ID": "CM-8(3)(a)|SI-2(2)|SI-7(1)",
414
- "Rev": 4
415
- },
416
- {
417
- "AwsConfigRuleSourceIdentifier": "DB_INSTANCE_BACKUP_ENABLED",
418
- "AwsConfigRuleName": "db-instance-backup-enabled",
419
- "NIST-ID": "CP-9(b)|CP-10|SI-12",
420
- "Rev": 4
421
- },
422
- {
423
- "AwsConfigRuleSourceIdentifier": "DYNAMODB_PITR_ENABLED",
424
- "AwsConfigRuleName": "dynamodb-pitr-enabled",
425
- "NIST-ID": "CP-9(b)|CP-10|SI-12",
426
- "Rev": 4
427
- },
428
- {
429
- "AwsConfigRuleSourceIdentifier": "ELASTICACHE_REDIS_CLUSTER_AUTOMATIC_BACKUP_CHECK",
430
- "AwsConfigRuleName": "elasticache-redis-cluster-automatic-backup-check",
431
- "NIST-ID": "CP-9(b)|CP-10|SI-12",
432
- "Rev": 4
433
- },
434
- {
435
- "AwsConfigRuleSourceIdentifier": "DYNAMODB_IN_BACKUP_PLAN",
436
- "AwsConfigRuleName": "dynamodb-in-backup-plan",
437
- "NIST-ID": "CP-9(b)|CP-10|SI-12",
438
- "Rev": 4
439
- },
440
- {
441
- "AwsConfigRuleSourceIdentifier": "EBS_IN_BACKUP_PLAN",
442
- "AwsConfigRuleName": "ebs-in-backup-plan",
443
- "NIST-ID": "CP-9(b)|CP-10|SI-12",
444
- "Rev": 4
445
- },
446
- {
447
- "AwsConfigRuleSourceIdentifier": "EFS_IN_BACKUP_PLAN",
448
- "AwsConfigRuleName": "efs-in-backup-plan",
449
- "NIST-ID": "CP-9(b)|CP-10|SI-12",
450
- "Rev": 4
451
- },
452
- {
453
- "AwsConfigRuleSourceIdentifier": "RDS_IN_BACKUP_PLAN",
454
- "AwsConfigRuleName": "rds-in-backup-plan",
455
- "NIST-ID": "CP-9(b)|CP-10|SI-12",
456
- "Rev": 4
457
- },
458
- {
459
- "AwsConfigRuleSourceIdentifier": "DYNAMODB_AUTOSCALING_ENABLED",
460
- "AwsConfigRuleName": "dynamodb-autoscaling-enabled",
461
- "NIST-ID": "CP-10|SC-5",
462
- "Rev": 4
463
- },
464
- {
465
- "AwsConfigRuleSourceIdentifier": "RDS_MULTI_AZ_SUPPORT",
466
- "AwsConfigRuleName": "rds-multi-az-support",
467
- "NIST-ID": "CP-10|SC-5|SC-36",
468
- "Rev": 4
469
- },
470
- {
471
- "AwsConfigRuleSourceIdentifier": "S3_BUCKET_VERSIONING_ENABLED",
472
- "AwsConfigRuleName": "s3-bucket-versioning-enabled",
473
- "NIST-ID": "CP-10|SI-12",
474
- "Rev": 4
475
- },
476
- {
477
- "AwsConfigRuleSourceIdentifier": "VPC_VPN_2_TUNNELS_UP",
478
- "AwsConfigRuleName": "vpc-vpn-2-tunnels-up",
479
- "NIST-ID": "CP-10",
480
- "Rev": 4
481
- },
482
- {
483
- "AwsConfigRuleSourceIdentifier": "ELB_CROSS_ZONE_LOAD_BALANCING_ENABLED",
484
- "AwsConfigRuleName": "elb-cross-zone-load-balancing-enabled",
485
- "NIST-ID": "CP-10|SC-5",
486
- "Rev": 4
487
- },
488
- {
489
- "AwsConfigRuleSourceIdentifier": "ROOT_ACCOUNT_HARDWARE_MFA_ENABLED",
490
- "AwsConfigRuleName": "root-account-hardware-mfa-enabled",
491
- "NIST-ID": "IA-2(1)(11)",
492
- "Rev": 4
493
- },
494
- {
495
- "AwsConfigRuleSourceIdentifier": "MFA_ENABLED_FOR_IAM_CONSOLE_ACCESS",
496
- "AwsConfigRuleName": "mfa-enabled-for-iam-console-access",
497
- "NIST-ID": "IA-2(1)(2)(11)",
498
- "Rev": 4
499
- },
500
- {
501
- "AwsConfigRuleSourceIdentifier": "IAM_USER_MFA_ENABLED",
502
- "AwsConfigRuleName": "iam-user-mfa-enabled",
503
- "NIST-ID": "IA-2(1)(2)(11)",
504
- "Rev": 4
505
- },
506
- {
507
- "AwsConfigRuleSourceIdentifier": "GUARDDUTY_NON_ARCHIVED_FINDINGS",
508
- "AwsConfigRuleName": "guardduty-non-archived-findings",
509
- "NIST-ID": "IR-4(1)|IR-6(1)|IR-7(1)|RA-5|SA-10|SI-4(a)(b)(c)",
510
- "Rev": 4
511
- },
512
- {
513
- "AwsConfigRuleSourceIdentifier": "CODEBUILD_PROJECT_SOURCE_REPO_URL_CHECK",
514
- "AwsConfigRuleName": "codebuild-project-source-repo-url-check",
515
- "NIST-ID": "SA-3(a)",
516
- "Rev": 4
517
- },
518
- {
519
- "AwsConfigRuleSourceIdentifier": "AUTOSCALING_GROUP_ELB_HEALTHCHECK_REQUIRED",
520
- "AwsConfigRuleName": "autoscaling-group-elb-healthcheck-required",
521
- "NIST-ID": "SC-5",
522
- "Rev": 4
523
- },
524
- {
525
- "AwsConfigRuleSourceIdentifier": "RDS_INSTANCE_DELETION_PROTECTION_ENABLED",
526
- "AwsConfigRuleName": "rds-instance-deletion-protection-enabled",
527
- "NIST-ID": "SC-5",
528
- "Rev": 4
529
- },
530
- {
531
- "AwsConfigRuleSourceIdentifier": "ALB_WAF_ENABLED",
532
- "AwsConfigRuleName": "alb-waf-enabled",
533
- "NIST-ID": "SC-7|SI-4(a)(b)(c)",
534
- "Rev": 4
535
- },
536
- {
537
- "AwsConfigRuleSourceIdentifier": "ELASTICSEARCH_NODE_TO_NODE_ENCRYPTION_CHECK",
538
- "AwsConfigRuleName": "elasticsearch-node-to-node-encryption-check",
539
- "NIST-ID": "SC-7|SC-8|SC-8(1)",
540
- "Rev": 4
541
- },
542
- {
543
- "AwsConfigRuleSourceIdentifier": "CMK_BACKING_KEY_ROTATION_ENABLED",
544
- "AwsConfigRuleName": "cmk-backing-key-rotation-enabled",
545
- "NIST-ID": "SC-12",
546
- "Rev": 4
547
- },
548
- {
549
- "AwsConfigRuleSourceIdentifier": "KMS_CMK_NOT_SCHEDULED_FOR_DELETION",
550
- "AwsConfigRuleName": "kms-cmk-not-scheduled-for-deletion",
551
- "NIST-ID": "SC-12|SC-28",
552
- "Rev": 4
553
- },
554
- {
555
- "AwsConfigRuleSourceIdentifier": "API_GW_CACHE_ENABLED_AND_ENCRYPTED",
556
- "AwsConfigRuleName": "api-gw-cache-enabled-and-encrypted",
557
- "NIST-ID": "SC-13|SC-28",
558
- "Rev": 4
559
- },
560
- {
561
- "AwsConfigRuleSourceIdentifier": "EFS_ENCRYPTED_CHECK",
562
- "AwsConfigRuleName": "efs-encrypted-check",
563
- "NIST-ID": "SC-13|SC-28",
564
- "Rev": 4
565
- },
566
- {
567
- "AwsConfigRuleSourceIdentifier": "ELASTICSEARCH_ENCRYPTED_AT_REST",
568
- "AwsConfigRuleName": "elasticsearch-encrypted-at-rest",
569
- "NIST-ID": "SC-13|SC-28",
570
- "Rev": 4
571
- },
572
- {
573
- "AwsConfigRuleSourceIdentifier": "ENCRYPTED_VOLUMES",
574
- "AwsConfigRuleName": "encrypted-volumes",
575
- "NIST-ID": "SC-13|SC-28",
576
- "Rev": 4
577
- },
578
- {
579
- "AwsConfigRuleSourceIdentifier": "RDS_STORAGE_ENCRYPTED",
580
- "AwsConfigRuleName": "rds-storage-encrypted",
581
- "NIST-ID": "SC-13|SC-28",
582
- "Rev": 4
583
- },
584
- {
585
- "AwsConfigRuleSourceIdentifier": "S3_BUCKET_SERVER_SIDE_ENCRYPTION_ENABLED",
586
- "AwsConfigRuleName": "s3-bucket-server-side-encryption-enabled",
587
- "NIST-ID": "SC-13|SC-28",
588
- "Rev": 4
589
- },
590
- {
591
- "AwsConfigRuleSourceIdentifier": "SAGEMAKER_ENDPOINT_CONFIGURATION_KMS_KEY_CONFIGURED",
592
- "AwsConfigRuleName": "sagemaker-endpoint-configuration-kms-key-configured",
593
- "NIST-ID": "SC-13|SC-28",
594
- "Rev": 4
595
- },
596
- {
597
- "AwsConfigRuleSourceIdentifier": "SAGEMAKER_NOTEBOOK_INSTANCE_KMS_KEY_CONFIGURED",
598
- "AwsConfigRuleName": "sagemaker-notebook-instance-kms-key-configured",
599
- "NIST-ID": "SC-13|SC-28",
600
- "Rev": 4
601
- },
602
- {
603
- "AwsConfigRuleSourceIdentifier": "SNS_ENCRYPTED_KMS",
604
- "AwsConfigRuleName": "sns-encrypted-kms",
605
- "NIST-ID": "SC-13|SC-28",
606
- "Rev": 4
607
- },
608
- {
609
- "AwsConfigRuleSourceIdentifier": "DYNAMODB_TABLE_ENCRYPTED_KMS",
610
- "AwsConfigRuleName": "dynamodb-table-encrypted-kms",
611
- "NIST-ID": "SC-13",
612
- "Rev": 4
613
- },
614
- {
615
- "AwsConfigRuleSourceIdentifier": "S3_BUCKET_DEFAULT_LOCK_ENABLED",
616
- "AwsConfigRuleName": "s3-bucket-default-lock-enabled",
617
- "NIST-ID": "SC-28",
618
- "Rev": 4
619
- },
620
- {
621
- "AwsConfigRuleSourceIdentifier": "EC2_EBS_ENCRYPTION_BY_DEFAULT",
622
- "AwsConfigRuleName": "ec2-ebs-encryption-by-default",
623
- "NIST-ID": "SC-28",
624
- "Rev": 4
625
- },
626
- {
627
- "AwsConfigRuleSourceIdentifier": "RDS_SNAPSHOT_ENCRYPTED",
628
- "AwsConfigRuleName": "rds-snapshot-encrypted",
629
- "NIST-ID": "SC-28",
630
- "Rev": 4
631
- },
632
- {
633
- "AwsConfigRuleSourceIdentifier": "CLOUD_TRAIL_LOG_FILE_VALIDATION_ENABLED",
634
- "AwsConfigRuleName": "cloud-trail-log-file-validation-enabled",
635
- "NIST-ID": "SI-7|SI-7(1)",
636
- "Rev": 4
637
- }
638
- ]