aws_compliance

AWS Compliance

This control checks if an AWS CodeBuild project environment has privileged mode enabled. This control fails when an AWS CodeBuild project environment has privileged mode enabled.

codebuild_project_environment_privileged_mode_disabled

pci_dss_v321_requirement_6_3_1

6.3.1 Examine written software-development procedures and interview responsible personnel to verify that pre-production and/or custom application accounts, user IDs and/or passwords are removed before an application goes into production or is released to customers

pci_dss_v321_requirement_6_3_a

6.3.a Examine written software-development processes to verify that the processes are based on industry standards and/or best practices

pci_dss_v321_requirement_6_3_b

6.3.b Examine written software-development processes to verify that information security is included throughout the life cycle

pci_dss_v321_requirement_6_3_c

6.3.c Examine written software-development processes to verify that software applications are developed in accordance with PCI DSS

pci_dss_v321_requirement_6_5_8

6.5.8 Examine software-development policies and procedures and interview responsible personnel to verify that improper access control—such as insecure direct object references, failure to restrict URL access, and directory traversal—is addressed by coding technique

all_controls_codebuild

CodeBuild

nist_csf_pr_ac_1

PR.AC-1

nist_csf_pr_ac_4

PR.AC-4

nist_csf_pr_pt_3

PR.PT-3

CodeBuild project environments should not have privileged mode enabled

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, FFIEC, PCI, NIST, HIPAA, RBI CSF, GDPR, SOC 2, Audit Manager Control Tower, FedRAMP, GxP and AWS Foundational Security Best Practices controls across all your AWS accounts using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-aws-compliance

Control: CodeBuild project environments should not have privileged mode enabled

Description

Usage

SQL

Tags