aws_compliance

AWS Compliance

Ensure a minimum duration of event log data is retained for your log groups to help with troubleshooting and forensics investigations.

cloudwatch_log_group_retention_period_365

pci_dss_v321_requirement_10_1

10.1 Implement audit trails to link all access to system components to each individual user

pci_dss_v321_requirement_10_7

10.7 Retain audit trail history for at least one year, with a minimum of three months immediately available for analysis (for example, online, archived, or restorable from backup)

pci_dss_v321_requirement_10_7_b

10.7.b Interview personnel and examine audit logs to verify that audit logs are retained for at least one year

pci_dss_v321_requirement_10_7_c

10.7.c Interview personnel and observe processes to verify that at least the last three months' logs are immediately available for analysis

gxp_21_cfr_part_11_11_10_c

11.10(c) Protection of records to enable their accurate and ready retrieval throughout the records retention period

gxp_21_cfr_part_11_11_10_e

11.10(e) Use of secure, computer-generated, time-stamped audit trails to independently record the date and time of operator entries and actions that create, modify, or delete electronic records

hipaa_final_omnibus_security_rule_2013_164_312_b

164.312(b) Audit controls

hipaa_security_rule_2003_164_312_b

cis_controls_v8_ig1_3_3

3.3 Configure Data Access Control Lists

nist_800_171_rev_2_3_3_1

3.3.1 Create and retain system audit logs and records to the extent needed to enable the monitoring, analysis, investigation, and reporting of unlawful or unauthorized system activity

cis_controls_v8_ig1_3_4

3.4 Enforce Data Retention

nist_800_171_rev_2_3_6_1

3.6.1 Establish an operational incident-handling capability for organizational systems that includes preparation, detection, analysis, containment, recovery, and user response activities

nist_800_171_rev_2_3_6_2

3.6.2 Track, document, and report incidents to designated officials and/or authorities both internal and external to the organization

cis_controls_v8_ig1_8_1

8.1 Establish and Maintain an Audit Log Management Process

nist_800_53_rev_5_ac_16_b

AC-16(b)

nist_800_53_rev_5_au_11_1

AU-11(1) Long-Term Retrieval Capability

nist_800_53_rev_5_au_12_1

AU-12(1) System-Wide And Time-Correlated Audit Trial

nist_800_53_rev_5_au_12_2

AU-12(2) Standardized Formats

nist_800_53_rev_5_au_12_3

AU-12(3) Changes By Authorized Individuals

nist_800_53_rev_5_au_14_a

AU-14(a)

nist_800_53_rev_5_au_14_b

AU-14(b)

fedramp_moderate_rev_4_au_6_1_3

AU-6(1)(3)

nist_800_53_rev_5_au_6_3

AU-6(3) Correlate Audit Record Repositories

nist_800_53_rev_5_au_6_4

AU-6(4) Central Review And Analysis

nist_800_53_rev_5_au_6_6

AU-6(6) Correletion With Physical Monitoring

nist_800_53_rev_5_au_6_9

AU-6(9) Correletion With From Nontechnical Sources

rbi_cyber_security_annex_i_7_4

Annex I (7.4)

nist_800_53_rev_5_au_11

Audit Record Retention (AU-11)

nist_800_53_rev_4_au_11

fedramp_moderate_rev_4_au_11

fedramp_low_rev_4_au_11

nist_800_53_rev_5_ca_7_b

CA-7(b)

soc_2_cc_7_2

CC7.2 The entity monitors system components and the operation of those components for anomalies that are indicative of malicious acts, natural disasters, and errors affecting the entity's ability to meet its objectives; anomalies are analyzed to determine whether they represent security events

soc_2_cc_7_3

CC7.3 The entity evaluates security events to determine whether they could or have resulted in a failure of the entity to meet its objectives (security incidents) and, if so, takes actions to prevent or address such failures

all_controls_cloudwatch

CloudWatch

nist_800_53_rev_5_pm_31

Continuous Monitoring Strategy (PM-31)

ffiec_d_2_ma_ma_b_1

D2.MA.Ma.B.1

nist_csf_de_ae_3

DE.AE-3

nist_800_53_rev_4_si_12

Information Handling and Retention (SI-12)

fedramp_moderate_rev_4_si_12

nist_800_53_rev_5_si_12

Information Management and Retention (SI-12)

nist_800_53_rev_5_au_10

Non-Repudiation (AU-10)

nist_800_53_rev_5_pm_14_a_1

PM-14(a)(1)

nist_800_53_rev_5_pm_14_b

PM-14(b)

nist_800_53_rev_5_pm_21_b

PM-21(b)

nist_csf_pr_pt_1

PR.PT-1

nist_800_53_rev_5_sc_28_2

SC-28(2) Offline Storage

nist_800_53_rev_5_si_4_17

SI-4(17) Integrated Situational Awareness

Log group retention period should be at least 365 days

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, FFIEC, PCI, NIST, HIPAA, RBI CSF, GDPR, SOC 2, Audit Manager Control Tower, FedRAMP, GxP and AWS Foundational Security Best Practices controls across all your AWS accounts using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-aws-compliance

Control: Log group retention period should be at least 365 days

Description

Usage

SQL

Tags