aws_compliance

AWS Compliance

This control checks if an AWS CodeBuild project environment has privileged mode enabled. This control fails when an AWS CodeBuild project environment has privileged mode enabled.

codebuild_project_environment_privileged_mode_disabled

pci_dss_v321_requirement_6_3_1

6.3.1 Examine written software-development procedures and interview responsible personnel to verify that pre-production and/or custom application accounts, user IDs and/or passwords are removed before an application goes into production or is released to customers

pci_dss_v321_requirement_6_3_a

6.3.a Examine written software-development processes to verify that the processes are based on industry standards and/or best practices

pci_dss_v321_requirement_6_3_b

6.3.b Examine written software-development processes to verify that information security is included throughout the life cycle

pci_dss_v321_requirement_6_3_c

6.3.c Examine written software-development processes to verify that software applications are developed in accordance with PCI DSS

pci_dss_v321_requirement_6_5_8

6.5.8 Examine software-development policies and procedures and interview responsible personnel to verify that improper access control—such as insecure direct object references, failure to restrict URL access, and directory traversal—is addressed by coding technique

acsc_essential_eight_ml_1_5_2

ACSC-EE-ML1-5.2: Restrict administrative privileges ML1

acsc_essential_eight_ml_1_5_3

ACSC-EE-ML1-5.3: Restrict administrative privileges ML1

acsc_essential_eight_ml_1_5_5

ACSC-EE-ML1-5.5: Restrict administrative privileges ML1

acsc_essential_eight_ml_2_5_10

ACSC-EE-ML2-5.10: Restrict administrative privileges ML2

acsc_essential_eight_ml_2_5_2

ACSC-EE-ML2-5.2: Restrict administrative privileges ML2

acsc_essential_eight_ml_2_5_3

ACSC-EE-ML2-5.3: Restrict administrative privileges ML2

acsc_essential_eight_ml_2_5_4

ACSC-EE-ML2-5.4: Restrict administrative privileges ML2

acsc_essential_eight_ml_2_5_5

ACSC-EE-ML2-5.5: Restrict administrative privileges ML2

acsc_essential_eight_ml_2_5_6

ACSC-EE-ML2-5.6: Restrict administrative privileges ML2

acsc_essential_eight_ml_2_5_8

ACSC-EE-ML2-5.8: Restrict administrative privileges ML2

acsc_essential_eight_ml_2_8_6

ACSC-EE-ML2-8.6: Regular backups ML2

acsc_essential_eight_ml_2_8_8

ACSC-EE-ML2-8.8: Regular backups ML2

acsc_essential_eight_ml_3_5_12

ACSC-EE-ML3-5.12: Restrict administrative privileges ML3

acsc_essential_eight_ml_3_5_2

ACSC-EE-ML3-5.2: Restrict administrative privileges ML3

acsc_essential_eight_ml_3_5_3

ACSC-EE-ML3-5.3: Restrict administrative privileges ML3

acsc_essential_eight_ml_3_5_5

ACSC-EE-ML3-5.5: Restrict administrative privileges ML3

acsc_essential_eight_ml_3_5_6

ACSC-EE-ML3-5.6: Restrict administrative privileges ML3

acsc_essential_eight_ml_3_5_7

ACSC-EE-ML3-5.7: Restrict administrative privileges ML3

acsc_essential_eight_ml_3_5_9

ACSC-EE-ML3-5.9: Restrict administrative privileges ML3

acsc_essential_eight_ml_3_8_6

ACSC-EE-ML3-8.6: Regular backups ML3

acsc_essential_eight_ml_3_8_8

ACSC-EE-ML3-8.8: Regular backups ML3

all_controls_codebuild

CodeBuild

nist_csf_pr_ac_1

PR.AC-1

nist_csf_pr_ac_4

PR.AC-4

nist_csf_pr_pt_3

PR.PT-3

CodeBuild project environments should not have privileged mode enabled

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, FFIEC, PCI, NIST, HIPAA, RBI CSF, GDPR, SOC 2, Audit Manager Control Tower, FedRAMP, GxP and AWS Foundational Security Best Practices controls across all your AWS accounts using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-aws-compliance

Control: CodeBuild project environments should not have privileged mode enabled

Description

Usage

SQL

Tags