aws_compliance

Ensure that a REST API stage uses a Secure Sockets Layer (SSL) certificate. This rule is compliant if the REST API stage does not have an associated SSL certificate.

apigateway_rest_api_stage_use_ssl_certificate

pci_dss_v40_requirement_1_2_8

1.2.8: Configuration files for NSCs are secured from unauthorized access and are kept consistent with active network configurations

pci_dss_v40_requirement_1_3_1

1.3.1: Inbound traffic to the CDE is restricted as follows: To only traffic that is necessary, All other traffic is specifically denied

pci_dss_v40_requirement_1_3_2

1.3.2: Outbound traffic from the CDE is restricted as follows: To only traffic that is necessary, All other traffic is specifically denied

pci_dss_v40_requirement_1_4_2

1.4.2: Inbound traffic from untrusted networks to trusted networks is restricted

pci_dss_v40_requirement_1_5_1

1.5.1 Security controls are implemented on any computing devices, including company- and employee-owned devices, that connect to both untrusted networks

pci_dss_v40_requirement_11_3_1_3

11.3.1.3: 3 Internal vulnerability scans are performed after any significant change

gxp_21_cfr_part_11_11_30

11.30 Controls for open systems

pci_dss_v40_requirement_11_5_2

11.5.2: A change-detection mechanism (for example, file integrity monitoring tools) is deployed

hipaa_final_omnibus_security_rule_2013_164_312_a_2_iv

164.312(a)(2)(iv) Encryption and decryption

hipaa_final_omnibus_security_rule_2013_164_312_e_1

164.312(e)(1) Transmission security

hipaa_final_omnibus_security_rule_2013_164_312_e_2_ii

164.312(e)(2)(ii) Encryption

nist_800_172_3_1_3_e

3.1.3e Employ [Assignment: organization-defined secure information transfer solutions] to control information flows between security domains on connected systems

rbi_itf_nbfc_3_1_i

3.1.i Public Key Infrastructure (PKI)

nist_800_171_rev_2_3_13_8

3.13.8 Implement cryptographic mechanisms to prevent unauthorized disclosure of CUI during transmission unless otherwise protected by alternative physical safeguards

pci_dss_v40_requirement_3_5_1_1

3.5.1.1: Hashes used to render PAN unreadable (per the first bullet of Requirement 3.5.1) are keyed cryptographic hashes of the entire PAN, with associated keymanagement processes and procedures

pci_dss_v40_requirement_3_5_1_3

3.5.1.3: If disk-level or partition-level encryption is used (rather than file-, column-, or field-level database encryption) to render PAN unreadable

pci_dss_v40_requirement_3_6_1_2

3.6.1.2: Secret and private keys used to protect stored account data

pci_dss_v40_requirement_3_6_1_3

3.6.1.3: Access to cleartext cryptographic key components is restricted to the fewest number of custodians necessary

pci_dss_v40_requirement_3_6_1_4

3.6.1.4: Cryptographic keys are stored in the fewest possible locations

pci_dss_v40_requirement_3_7_1

3.7.1: Key-management policies and procedures are implemented to include generation of strong cryptographic keys used to protect stored account data

pci_dss_v40_requirement_3_7_2

3.7.2: Key-management policies and procedures are implemented to include secure distribution of cryptographic keys used to protect stored account data

pci_dss_v40_requirement_3_7_4

3.7.4: Key management policies and procedures are implemented for cryptographic key changes for keys that have reached the end of their cryptoperiod, as defined by the associated application vendor or key owner

pci_dss_v40_requirement_3_7_6

3.7.6 Where manual cleartext cryptographic keymanagement operations are performed by personnel, key-management policies and procedures are implemented, including managing these operations using split knowledge and dual control

pci_dss_v40_requirement_3_7_7

3.7.7 Key management policies and procedures are implemented to include the prevention of unauthorized substitution of cryptographic keys

pci_dss_v40_requirement_4_2_1_1

4.2.1.1: An inventory of the entity's trusted keys and certificates used to protect PAN during transmission is maintained

nydfs_23_500_02_a

500.02(a)

nydfs_23_500_15_a

500.15(a)

pci_dss_v40_appendix_a1_1_3

A1.1.3: Controls are implemented such that each customer can only access resources allocated to them

nist_800_53_rev_5_ac_17_2

AC-17(2) Protection Of Confidentiality And Integrity Using Encryption

nist_800_53_rev_5_ac_24_1

AC-24(1)

nist_800_53_rev_5_ac_4_22

AC-4(22) Access Only

all_controls_apigateway

API Gateway

nist_800_53_rev_5_au_9_3

AU-9(3) Cryptographic Protection

rbi_cyber_security_annex_i_1_3

Annex I (1.3)

nist_800_53_rev_5_ca_9_b

CA-9(b)

ffiec_d_3_pc_am_b_12

D3.PC.Am.B.12

ffiec_d_3_pc_am_b_13

D3.PC.Am.B.13

ffiec_d_3_pc_am_b_15

D3.PC.Am.B.15

nist_800_53_rev_5_ia_5_1_c

IA-5(1)(c)

nist_800_53_rev_5_ac_4

Information Flow Enforcement (AC-4)

nist_800_53_rev_5_pm_17_b

PM-17(b)

nist_csf_pr_ds_2

PR.DS-2

nist_800_53_rev_5_sc_13_a

SC-13(a)

nist_800_53_rev_5_sc_7_4_b

SC-7(4)(b)

nist_800_53_rev_5_sc_7_4_g

SC-7(4)(g)

nist_800_53_rev_5_sc_7_5

SC-7(5) Deny By Default — Allow By Exception

fedramp_moderate_rev_4_sc_8_1

SC-8(1) Cryptographic Or Alternate Physical Protection

nist_800_53_rev_5_sc_8_1

SC-8(1) Cryptographic Protection

nist_800_53_rev_5_sc_8_2

SC-8(2) Pre- And Post-Transmission Handling

nist_800_53_rev_5_sc_8_3

SC-8(3) Cryptographic Protection For Message Externals

nist_800_53_rev_5_sc_8_4

SC-8(4) Conceal Or Ramdomize Communications

nist_800_53_rev_5_sc_8_5

SC-8(5) Protected Distribution System

nist_800_53_rev_5_si_1_a_2

SI-1(a)(2)

nist_800_53_rev_5_si_1_c_2

SI-1(c)(2)

fedramp_moderate_rev_4_sc_23

Session Authenticity (SC-23)

nist_800_53_rev_5_sc_23

nist_800_53_rev_5_sc_8

Transmission Confidentiality And Integrity (SC-8)

fedramp_moderate_rev_4_sc_8

Transmission Integrity (SC-8)

cisa_cyber_essentials_your_data_2

Your Data-2

cisa_cyber_essentials_your_systems_3

Your Systems-3

API Gateway stage should uses SSL certificate

foundational_security_apigateway_2

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, FFIEC, PCI, NIST, HIPAA, RBI CSF, GDPR, SOC 2, Audit Manager Control Tower, FedRAMP, GxP and AWS Foundational Security Best Practices controls across all your AWS accounts using Powerpipe and Steampipe.

AWS Compliance

Apache License 2.0

steampipe-mod-aws-compliance

Control: API Gateway stage should uses SSL certificate

Description

Usage

SQL

Tags