aws_compliance

AWS Compliance

An inventory of the software platforms and applications within the organization is possible by managing Amazon Elastic Compute Cloud (Amazon EC2) instances with AWS Systems Manager.

ec2_instance_ssm_managed

cisa_cyber_essentials_your_systems_1

Your Systems-1

fedramp_low_rev_4_cm_2

Baseline Configuration (CM-2)

fedramp_low_rev_4_cm_8

Information System Component Inventory (CM-8)

fedramp_low_rev_4_sa_3

System Development Life Cycle (SA-3)

fedramp_moderate_rev_4_cm_2

fedramp_moderate_rev_4_cm_7_a

CM-7(a)

fedramp_moderate_rev_4_cm_8_1

CM-8(1)

fedramp_moderate_rev_4_cm_8_3_a

CM-8(3)(a)

fedramp_moderate_rev_4_sa_10

Developer Configuration Management (SA-10)

fedramp_moderate_rev_4_sa_3_a

SA-3(a)

fedramp_moderate_rev_4_si_2_2

Automated Flaw Remediation Status (SI-2(2))

fedramp_moderate_rev_4_si_7_1

SI-7(1) Integrity Checks

ffiec_d_1_g_it_b_1

D1.G.IT.B.1

ffiec_d_3_pc_im_b_5

D3.PC.Im.B.5

gxp_21_cfr_part_11_11_10_a

11.10(a)

gxp_21_cfr_part_11_11_10_h

11.10(h)

hipaa_164_308_a_5_ii_b

164.308(a)(5)(ii)(B) Protection from malicious software

nist_800_171_rev_2_3_14_2

3.14.2 Provide protection from malicious code at designated locations within organizational systems

nist_800_171_rev_2_3_4_1

3.4.1 Establish and maintain baseline configurations and inventories of organizational systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles

nist_800_171_rev_2_3_4_2

3.4.2 Establish and enforce security configuration settings for information technology products employed in organizational systems

nist_800_171_rev_2_3_4_6

3.4.6 Employ the principle of least functionality by configuring organizational systems to provide only essential capabilities

nist_800_171_rev_2_3_4_9

3.4.9 Control and monitor user-installed software

nist_800_53_rev_4_cm_2

nist_800_53_rev_4_cm_7

Least Functionality (CM-7)

nist_800_53_rev_4_cm_8_1

CM-8(1) Updates During Installation / Removals

nist_800_53_rev_4_cm_8_3

CM-8(3) Automated Unauthorized Component Detection

nist_800_53_rev_4_sa_10

nist_800_53_rev_4_sa_3

nist_800_53_rev_4_si_2_2

SI-2(2) Automates Flaw Remediation Status

nist_800_53_rev_4_si_7_1

nist_800_53_rev_5_cm_2_2

CM-2(2) Automation Support For Accuracy And Currency

nist_800_53_rev_5_cm_2_a

CM-2(a)

nist_800_53_rev_5_cm_2_b

CM-2(b)

nist_800_53_rev_5_cm_2_b_1

CM-2(b)(1)

nist_800_53_rev_5_cm_2_b_2

CM-2(b)(2)

nist_800_53_rev_5_cm_2_b_3

CM-2(b)(3)

nist_800_53_rev_5_cm_3_3

CM-3(3) Automated Change Implementation

nist_800_53_rev_5_cm_6

Configuration Settings (CM-6)

nist_800_53_rev_5_cm_8_1

CM-8(1) Updates During Installation And Removals

nist_800_53_rev_5_cm_8_2

CM-8(2) Automated Maintenance

nist_800_53_rev_5_cm_8_3_a

nist_800_53_rev_5_cm_8_6

CM-8(6) Assessed Configurations And Approved Deviations

nist_800_53_rev_5_cm_8_a

CM-8(a)

nist_800_53_rev_5_cm_8_a_1

CM-8(a)(1)

nist_800_53_rev_5_cm_8_a_2

CM-8(a)(2)

nist_800_53_rev_5_cm_8_a_3

CM-8(a)(3)

nist_800_53_rev_5_cm_8_a_4

CM-8(a)(4)

nist_800_53_rev_5_cm_8_a_5

CM-8(a)(5)

nist_800_53_rev_5_cm_8_b

CM-8(b)

nist_800_53_rev_5_si_3_c_2

SI-3(c)(2)

nist_csf_id_am_1

ID.AM-1

nist_csf_id_am_2

ID.AM-2

nist_csf_pr_ds_3

PR.DS-3

nist_csf_pr_ds_7

PR.DS-7

nist_csf_pr_ds_8

PR.DS-8

nist_csf_pr_ip_1

PR.IP-1

nist_csf_pr_ip_12

PR.IP-12

nist_csf_pr_ip_2

PR.IP-2

rbi_cyber_security_annex_i_1_1

Annex I (1.1)

soc_2_cc_3_2

CC3.2 COSO Principle 7: The entity identifies risks to the achievement of its objectives across the entity and analyzes risks as a basis for determining how the risks should be managed

soc_2_cc_7_1

CC7.1 To meet its objectives, the entity uses detection and monitoring procedures to identify (1) changes to configurations that result in the introduction of new vulnerabilities, and (2) susceptibilities to newly discovered vulnerabilities

EC2 instances should be managed by AWS Systems Manager

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, FFIEC, PCI, NIST, HIPAA, RBI CSF, GDPR, SOC 2, Audit Manager Control Tower, FedRAMP, GxP and AWS Foundational Security Best Practices controls across all your AWS accounts using Steampipe.

Apache License 2.0

steampipe-mod-aws-compliance

turbot/aws_compliance

Control: EC2 instances should be managed by AWS Systems Manager

Description

Usage

SQL

Tags

Steampipe

Resources

Community