aws_compliance

AWS Compliance

Ensure that your AWS Simple Storage Service (AWS S3) bucket has lock enabled, by default.

s3_bucket_object_lock_enabled

gxp_21_cfr_part_11_11_10_a

11.10(a) Validation of systems to ensure accuracy, reliability, consistent intended performance, and the ability to discern invalid or altered records

hipaa_security_rule_2003_164_308_a_1_ii_b

164.308(a)(1)(ii)(B) Risk management

hipaa_final_omnibus_security_rule_2013_164_308_a_1_ii_b

nist_800_171_rev_2_3_13_16

3.13.16 Protect the confidentiality of CUI at rest

nist_800_171_rev_2_3_3_8

3.3.8 Protect audit information and audit logging tools from unauthorized access, modification, and deletion

rbi_itf_nbfc_4_4_h

4.4.h Capacity and performance analysis

nydfs_23_500_02_a

500.02(a)

soc_2_c_1_1

C1.1 The entity identifies and maintains confidential information to meet the entity’s objectives related to confidentiality

soc_2_cc_6_1

CC6.1 The entity implements logical access security software, infrastructure, and architectures over protected information assets to protect them from security events to meet the entity's objectives

soc_2_cc_6_2

CC6.2 Prior to issuing system credentials and granting system access, the entity registers and authorizes new internal and external users whose access is administered by the entity

ffiec_d_2_ma_ma_b_1

D2.MA.Ma.B.1

nist_csf_id_be_5

ID.BE-5

nist_csf_pr_ds_1

PR.DS-1

nist_csf_pr_pt_5

PR.PT-5

nist_800_53_rev_4_sc_28

Protection Of Information At Rest (SC-28)

fedramp_moderate_rev_4_sc_28

Protection of Information at Rest (SC-28)

nist_csf_rc_rp_1

RC.RP-1

all_controls_s3

S3 bucket object lock should be enabled

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, FFIEC, PCI, NIST, HIPAA, RBI CSF, GDPR, SOC 2, Audit Manager Control Tower, FedRAMP, GxP and AWS Foundational Security Best Practices controls across all your AWS accounts using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-aws-compliance

Control: S3 bucket object lock should be enabled

Description

Usage

SQL

Tags