aws-cis-controls-assessment 1.0.9__py3-none-any.whl → 1.1.0__py3-none-any.whl

aws_cis_assessment/controls/ig2/__init__.py

@@ -92,6 +92,45 @@ from .control_remaining_rules import (
     AuditLogPolicyExistsAssessment
 )
 
+# Import AWS Backup IG2 controls
+from .control_aws_backup_ig2 import (
+    BackupVaultLockCheckAssessment,
+    BackupReportPlanExistsCheckAssessment,
+    BackupRestoreTestingPlanExistsCheckAssessment
+)
+
+# Import Control 8 Audit Logging controls
+from .control_8_audit_logging import (
+    Route53QueryLoggingAssessment,
+    ALBAccessLogsEnabledAssessment,
+    CloudFrontAccessLogsEnabledAssessment,
+    CloudWatchLogRetentionCheckAssessment,
+    CloudTrailInsightsEnabledAssessment,
+    ConfigRecordingAllResourcesAssessment,
+    WAFLoggingEnabledAssessment
+)
+
+# Import Controls 4, 5, 6 - Access & Configuration Controls
+from .control_4_5_6_access_configuration import (
+    # Control 4 - Secure Configuration
+    IAMMaxSessionDurationCheckAssessment,
+    SecurityGroupDefaultRulesCheckAssessment,
+    VPCDnsResolutionEnabledAssessment,
+    RDSDefaultAdminCheckAssessment,
+    EC2InstanceProfileLeastPrivilegeAssessment,
+    # Control 5 - Account Management
+    IAMServiceAccountInventoryCheckAssessment,
+    IAMAdminPolicyAttachedToRoleCheckAssessment,
+    SSOEnabledCheckAssessment,
+    IAMUserNoInlinePoliciesAssessment,
+    # Control 6 - Access Control Management
+    IAMAccessAnalyzerEnabledAssessment,
+    IAMPermissionBoundariesCheckAssessment,
+    OrganizationsSCPEnabledCheckAssessment,
+    CognitoUserPoolMFAEnabledAssessment,
+    VPNConnectionMFAEnabledAssessment
+)
+
 __all__ = [
     # Control 3.10 - Encrypt Sensitive Data in Transit
     'APIGatewaySSLEnabledAssessment',
@@ -165,8 +204,42 @@ __all__ = [
     'RestrictedCommonPortsAssessment',
     'AuditLogPolicyExistsAssessment',
     
+    # AWS Backup IG2 Controls
+    'BackupVaultLockCheckAssessment',
+    'BackupReportPlanExistsCheckAssessment',
+    'BackupRestoreTestingPlanExistsCheckAssessment',
+    
+    # Control 8 - Audit Log Management
+    'Route53QueryLoggingAssessment',
+    'ALBAccessLogsEnabledAssessment',
+    'CloudFrontAccessLogsEnabledAssessment',
+    'CloudWatchLogRetentionCheckAssessment',
+    'CloudTrailInsightsEnabledAssessment',
+    'ConfigRecordingAllResourcesAssessment',
+    'WAFLoggingEnabledAssessment',
+    
     # Control 5.2 - Use Unique Passwords
     'MFAEnabledForIAMConsoleAccessAssessment',
     'RootAccountMFAEnabledAssessment',
-    'IAMUserUnusedCredentialsAssessment'
+    'IAMUserUnusedCredentialsAssessment',
+    
+    # Control 4 - Secure Configuration
+    'IAMMaxSessionDurationCheckAssessment',
+    'SecurityGroupDefaultRulesCheckAssessment',
+    'VPCDnsResolutionEnabledAssessment',
+    'RDSDefaultAdminCheckAssessment',
+    'EC2InstanceProfileLeastPrivilegeAssessment',
+    
+    # Control 5 - Account Management
+    'IAMServiceAccountInventoryCheckAssessment',
+    'IAMAdminPolicyAttachedToRoleCheckAssessment',
+    'SSOEnabledCheckAssessment',
+    'IAMUserNoInlinePoliciesAssessment',
+    
+    # Control 6 - Access Control Management
+    'IAMAccessAnalyzerEnabledAssessment',
+    'IAMPermissionBoundariesCheckAssessment',
+    'OrganizationsSCPEnabledCheckAssessment',
+    'CognitoUserPoolMFAEnabledAssessment',
+    'VPNConnectionMFAEnabledAssessment'
 ]