turbot/aws_compliance

Benchmark: CC6.6 The entity implements logical access security measures to protect against threats from sources outside its system boundaries

Description

Restricts Access — The types of activities that can occur through a communication channel (for example, FTP site, router port) are restricted.

Protects Identification and Authentication Credentials — Identification and authentication credentials are protected during transmission outside its system boundaries.

Requires Additional Authentication or Credentials — Additional authentication information or credentials are required when accessing the system from outside its boundaries.

Implements Boundary Protection Systems — Boundary protection systems (for example, firewalls, demilitarized zones, and intrusion detection systems) are implemented to protect external access points from attempts and unauthorized access and are monitored to detect such attempts.

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-aws-compliance

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select CC6.6 The entity implements logical access security measures to protect against threats from sources outside its system boundaries.

Run this benchmark in your terminal:

powerpipe benchmark run aws_compliance.benchmark.soc_2_cc_6_6

Snapshot and share results via Turbot Pipes:

powerpipe benchmark run aws_compliance.benchmark.soc_2_cc_6_6 --share

Controls

Tags