aws_compliance

AWS Compliance

To help protect data at rest, ensure necessary customer master keys (CMKs) are not scheduled for deletion in AWS Key Management Service (AWS KMS).

kms_key_not_pending_deletion

gxp_21_cfr_part_11_11_30

11.30 Controls for open systems

hipaa_security_rule_2003_164_308_a_1_ii_b

164.308(a)(1)(ii)(B) Risk management

hipaa_final_omnibus_security_rule_2013_164_308_a_1_ii_b

nist_800_171_rev_2_3_13_10

3.13.10 Establish and manage cryptographic keys for cryptography employed in organizational systems

nist_800_171_rev_2_3_13_16

3.13.16 Protect the confidentiality of CUI at rest

rbi_cyber_security_annex_i_1_3

Annex I (1.3)

soc_2_cc_6_1

CC6.1 The entity implements logical access security software, infrastructure, and architectures over protected information assets to protect them from security events to meet the entity's objectives

soc_2_cc_6_2

CC6.2 Prior to issuing system credentials and granting system access, the entity registers and authorizes new internal and external users whose access is administered by the entity

fedramp_moderate_rev_4_sc_12

Cryptographic Key Establishment And Management (SC-12)

fedramp_low_rev_4_sc_12

nist_800_53_rev_4_sc_12

nist_800_53_rev_5_sc_12

all_controls_kms

nist_csf_pr_ds_1

PR.DS-1

nist_800_53_rev_4_sc_28

Protection Of Information At Rest (SC-28)

fedramp_moderate_rev_4_sc_28

Protection of Information at Rest (SC-28)

nist_800_53_rev_5_sa_9_6

SA-9(6) Organization-Controlled Cryptographic Keys

nist_800_53_rev_5_sc_12_2

SC-12(2) Symmetric Keys

nist_800_53_rev_5_sc_12_6

SC-12(6) Physical Control Of Keys

fedramp_moderate_rev_4_sc_13

Use of Cryptography (SC-13)

fedramp_low_rev_4_sc_13

cisa_cyber_essentials_your_systems_3

Your Systems-3

KMS keys should not be pending deletion

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, FFIEC, PCI, NIST, HIPAA, RBI CSF, GDPR, SOC 2, Audit Manager Control Tower, FedRAMP, GxP and AWS Foundational Security Best Practices controls across all your AWS accounts using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-aws-compliance

Control: KMS keys should not be pending deletion

Description

Usage

SQL

Tags