AWS Checks New Version

• GuardDuty EKS Runtime Monitoring should be enabled
• EFS Access Points Should Enforce a User Identity
• Check if GuardDuty Lambda Protection is enabled
• GuardDuty EKS Audit Log Monitoring Enabled
• EFS Should Not Have Policies Allowing Unrestricted Access Within VPC

CIS controls in the Protect family.

• CIS 3.3 — Configure Data Access Control Lists
• CIS 3.4 — Enforce Data Retention
• CIS 3.5 — Securely Dispose of Data
• CIS 3.6 — Encrypt Data on End-User Devices
• CIS 4.1 — Establish and Maintain a Secure Configuration Process

CIS controls in the Identify family.

• CIS 1.1 — Establish and Maintain Detailed Enterprise Asset Inventory
• CIS 2.1 — Establish and Maintain a Software Inventory
• CIS 2.2 — Ensure Authorized Software is Currently Supported
• CIS 3.1 — Establish and Maintain a Data Management Process
• CIS 3.2 — Establish and Maintain a Data Inventory

CIS controls in the Respond family.

• CIS 1.2 — Address Unauthorized Assets
• CIS 2.3 — Address Unauthorized Software
• CIS 5.3 — Disable Dormant Accounts
• CIS 7.2 — Establish and Maintain a Remediation Process
• CIS 17.1 — Designate Personnel to Manage Incident Handling

CIS controls in the Recover family.

• CIS 11.1 — Establish and Maintain a Data Recovery Process
• CIS 11.2 — Perform Automated Backups
• CIS 11.4 — Establish and Maintain an Isolated Instance of Recovery Data
• CIS 11.5 — Test Data Recovery

CIS controls in the Detect family.

• CIS 8.2 — Collect Audit Logs
• CIS 1.3 — Utilize an Active Discovery Tool

Plain-English overview of the framework.

• CIS Critical Security Controls v8.1 — overview