aws_compliance

AWS Compliance

Enable key rotation to ensure that keys are rotated once they have reached the end of their crypto period.

kms_cmk_rotation_enabled

gxp_21_cfr_part_11_11_30

11.30 Controls for open systems

nist_800_171_rev_2_3_12_1

3.12.1 Periodically assess the security controls in organizational systems to determine if the controls are effective in their application

nist_800_171_rev_2_3_12_3

3.12.3 Monitor security controls on an ongoing basis to ensure the continued effectiveness of the controls

nist_800_171_rev_2_3_12_4

3.12.4 Develop, document, and periodically update system security plans that describe system boundaries, system environments of operation, how security requirements are implemented, and the relationships with or connections to other systems

nist_800_171_rev_2_3_13_10

3.13.10 Establish and manage cryptographic keys for cryptography employed in organizational systems

cis_controls_v8_ig1_4_6

4.6 Securely Manage Enterprise Assets and Software

rbi_itf_nbfc_6_3

6.3 Backup and Recovery

rbi_cyber_security_annex_i_1_3

Annex I (1.3)

article_25

Article 25 Data protection by design and by default

article_30

Article 30 Records of processing activities

nist_800_53_rev_5_cm_6_a

CM-6(a)

nist_800_53_rev_5_cm_9_b

CM-9(b)

fedramp_moderate_rev_4_sc_12

Cryptographic Key Establishment And Management (SC-12)

fedramp_low_rev_4_sc_12

nist_800_53_rev_4_sc_12

nist_800_53_rev_5_sc_12

nist_csf_de_cm_2

DE.CM-2

nist_csf_id_ra_1

ID.RA-1

nist_csf_id_ra_5

ID.RA-5

nist_csf_id_sc_4

ID.SC-4

all_controls_kms

nist_800_53_rev_5_sa_9_6

SA-9(6) Organization-Controlled Cryptographic Keys

nist_800_53_rev_5_sc_12_2

SC-12(2) Symmetric Keys

nist_800_53_rev_5_sc_12_6

SC-12(6) Physical Control Of Keys

cisa_cyber_essentials_your_systems_3

Your Systems-3

KMS CMK rotation should be enabled

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, FFIEC, PCI, NIST, HIPAA, RBI CSF, GDPR, SOC 2, Audit Manager Control Tower, FedRAMP, GxP and AWS Foundational Security Best Practices controls across all your AWS accounts using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-aws-compliance

Control: KMS CMK rotation should be enabled

Description

Usage

SQL

Tags