aws_compliance

AWS Compliance

Ensure that Application Load Balancers and Network Load Balancers are configured to use certificates from AWS Certificate Manager (ACM). This rule is compliant if at least 1 load balancer is configured without a certificate from ACM.

elb_application_network_lb_use_ssl_certificate

gxp_21_cfr_part_11_11_30

11.30 Controls for open systems

hipaa_final_omnibus_security_rule_2013_164_312_a_2_iv

164.312(a)(2)(iv) Encryption and decryption

hipaa_final_omnibus_security_rule_2013_164_312_e_2_ii

164.312(e)(2)(ii) Encryption

pci_dss_v321_requirement_2_3

2.3 Encrypt all non-console administrative access using strong cryptography

nist_800_172_3_1_3_e

3.1.3e Employ [Assignment: organization-defined secure information transfer solutions] to control information flows between security domains on connected systems

rbi_itf_nbfc_3_1_i

3.1.i Public Key Infrastructure (PKI)

nist_800_171_rev_2_3_13_15

3.13.15 Protect the authenticity of communications sessions

pci_dss_v321_requirement_4_1_a

4.1.a Identify all locations where cardholder data is transmitted or received over open, public networks

pci_dss_v321_requirement_4_1_g

4.1.g For TLS implementations, examine system configurations to verify that TLS is enabled whenever cardholder data is transmitted or received

nydfs_23_500_02_a

500.02(a)

nydfs_23_500_15_a

500.15(a)

gxp_eu_annex_11_operational_phase_7_1

7.1 Data Storage - Damage Protection

rbi_cyber_security_annex_i_1_3

Annex I (1.3)

ffiec_d_3_pc_am_b_13

D3.PC.Am.B.13

all_controls_elb

nist_csf_pr_ds_2

PR.DS-2

nist_800_53_rev_5_sc_23_5

SC-23(5) Allowed Certificate Authorities

fedramp_moderate_rev_4_sc_8_1

SC-8(1) Cryptographic Or Alternate Physical Protection

nist_800_53_rev_5_sc_8_1

SC-8(1) Cryptographic Protection

fedramp_moderate_rev_4_sc_8

Transmission Integrity (SC-8)

cisa_cyber_essentials_your_data_2

Your Data-2

cisa_cyber_essentials_your_surroundings_3

Your Surroundings-3

cisa_cyber_essentials_your_systems_3

Your Systems-3

ELB application and network load balancers should only use SSL or HTTPS listeners

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, FFIEC, PCI, NIST, HIPAA, RBI CSF, GDPR, SOC 2, Audit Manager Control Tower, FedRAMP, GxP and AWS Foundational Security Best Practices controls across all your AWS accounts using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-aws-compliance

Control: ELB application and network load balancers should only use SSL or HTTPS listeners

Description

Usage

SQL

Tags