aws_compliance

AWS Compliance

Ensure that an AWS API Gateway API stage is using a WAF Web ACL. This rule is non-compliant if an AWS WAF Web ACL is not used.

apigateway_stage_use_waf_web_acl

pci_dss_v321_requirement_1_1_4_c

1.1.4.c Observe network configurations to verify that a firewall is in place at each Internet connection and between any demilitarized zone (DMZ) and the internal network zone, per the documented configuration standards and network diagrams

nist_800_171_rev_2_3_14_6

3.14.6 Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks

pci_dss_v321_requirement_6_6

6.6 For public-facing web applications, ensure that either one of the requirements are in place

nist_800_53_rev_5_ac_4_21

AC-4(21) Physical Or Logical Separation Of Infomation Flows

all_controls_apigateway

API Gateway

rbi_cyber_security_annex_i_5_1

Annex I (5.1)

fedramp_moderate_rev_4_cm_2

Baseline Configuration (CM-2)

fedramp_low_rev_4_cm_2

ffiec_d_3_pc_im_b_2

D3.PC.IM.B.2

ffiec_d_3_pc_im_b_1

D3.PC.Im.B.1

nist_csf_de_ae_1

DE.AE-1

nist_csf_pr_ac_3

PR.AC-3

nist_csf_pr_ac_5

PR.AC-5

nist_csf_pr_pt_4

PR.PT-4

fedramp_moderate_rev_4_si_4_a_b_c

SI-4(a)(b)(c)

cisa_cyber_essentials_your_systems_3

Your Systems-3

API Gateway stage should be associated with waf

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, FFIEC, PCI, NIST, HIPAA, RBI CSF, GDPR, SOC 2, Audit Manager Control Tower, FedRAMP, GxP and AWS Foundational Security Best Practices controls across all your AWS accounts using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-aws-compliance

Control: API Gateway stage should be associated with waf

Description

Usage

SQL

Tags