aws_compliance

AWS Compliance

Enable this rule to help with the baseline configuration of AWS Elastic Compute Cloud (AWS EC2) instances by checking whether AWS EC2 instances have been stopped for more than the allowed number of days, according to your organization's standards.

ec2_stopped_instance_30_days

cis_controls_v8_ig1_1_1

1.1 Establish and Maintain Detailed Enterprise Asset Inventory

gxp_21_cfr_part_11_11_10_a

11.10(a) Validation of systems to ensure accuracy, reliability, consistent intended performance, and the ability to discern invalid or altered records

hipaa_security_rule_2003_164_308_a_1_ii_b

164.308(a)(1)(ii)(B) Risk management

hipaa_final_omnibus_security_rule_2013_164_308_a_1_ii_b

rbi_itf_nbfc_3_1_a

3.1.a Identification and Classification of Information Assets

nist_800_171_rev_2_3_4_1

3.4.1 Establish and maintain baseline configurations and inventories of organizational systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles

nist_800_171_rev_2_3_4_2

3.4.2 Establish and enforce security configuration settings for information technology products employed in organizational systems

nist_800_172_3_4_3_e

3.4.3e Employ automated discovery and management tools to maintain an up-to-date, complete, accurate, and readily available inventory of system components

cis_controls_v8_ig1_4_1

4.1 Establish and Maintain a Secure Configuration Process

fedramp_low_rev_4_cm_2

Baseline Configuration (CM-2)

fedramp_moderate_rev_4_cm_2

nist_800_53_rev_4_cm_2

nist_800_53_rev_5_cm_2_2

CM-2(2) Automation Support For Accuracy And Currency

nist_800_53_rev_5_cm_2_a

CM-2(a)

nist_800_53_rev_5_cm_2_b

CM-2(b)

nist_800_53_rev_5_cm_2_b_1

CM-2(b)(1)

nist_800_53_rev_5_cm_2_b_2

CM-2(b)(2)

nist_800_53_rev_5_cm_2_b_3

CM-2(b)(3)

nist_800_53_rev_5_cm_3_3

CM-3(3) Automated Change Implementation

nist_800_53_rev_5_cm_8_6

CM-8(6) Assessed Configurations And Approved Deviations

ffiec_d_1_g_it_b_1

D1.G.IT.B.1

all_controls_ec2

nist_csf_id_am_2

ID.AM-2

nist_csf_pr_ds_7

PR.DS-7

nist_csf_pr_ip_1

PR.IP-1

cisa_cyber_essentials_your_systems_1

Your Systems-1

EC2 stopped instances should be removed in 30 days

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, FFIEC, PCI, NIST, HIPAA, RBI CSF, GDPR, SOC 2, Audit Manager Control Tower, FedRAMP, GxP and AWS Foundational Security Best Practices controls across all your AWS accounts using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-aws-compliance

Control: EC2 stopped instances should be removed in 30 days

Description

Usage

SQL

Tags