The organization: a. Manages the information system using [Assignment: organization-defined system development life cycle] that incorporates information security considerations.
steampipe check aws_compliance.benchmark.fedramp_moderate_rev_4_sa_3_a
- CodeBuild project plaintext environment variables should not contain sensitive AWS values
- CodeBuild GitHub or Bitbucket source repository URLs should use OAuth
- EC2 instances should be managed by AWS Systems Manager