iCompaas Support

CIS Control 1.4 1

• Ensure a log metric filter and alarm exist for AWS Config configuration changes

CIS Control 4.5 1

• Ensure hardware MFA is enabled for the "root" account

CIS Control 4.8 1

• Ensure a log metric filter and alarm exist for security group changes

CIS Control 6 3

• Ensure CloudTrail log file validation is enabled
• Ensure CloudTrail logs are encrypted at rest using KMS CMKs
• Ensure rotation for customer created CMKs is enabled

CIS Control 6.2 1

• Ensure VPC flow logging is enabled in all VPCs

CIS Control 11.3 1

• Ensure a log metric filter and alarm exist for changes to Network Access Control Lists (NACL)

CIS Control 14.6 2

• Ensure the default security group of every VPC restricts all traffic
• Ensure routing tables for VPC peering are "least access"

CIS Control 16 1

• Ensure a log metric filter and alarm exist for disabling or scheduled deletion of customer created CMKs

CIS Control 19 1

• Ensure IAM instance roles are used for AWS resource access from instances