Benchmark: SA-3(a)

Description

The organization: a. Manages the information system using [Assignment: organization-defined system development life cycle] that incorporates information security considerations.

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-aws-compliance

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select SA-3(a).

Run this benchmark in your terminal:

powerpipe benchmark run aws_compliance.benchmark.fedramp_moderate_rev_4_sa_3_a

Snapshot and share results via Turbot Pipes:

powerpipe benchmark run aws_compliance.benchmark.fedramp_moderate_rev_4_sa_3_a --share

Controls

CodeBuild project plaintext environment variables should not contain sensitive AWS values
CodeBuild GitHub or Bitbucket source repository URLs should use OAuth
EC2 instances should be managed by AWS Systems Manager

Benchmark: SA-3(a)

Description

Usage

Controls

Tags