AWS Services

Ensure CloudFront SNI Enabled
Description: CloudFront SNI checks if Amazon CloudFront distributions are using a custom SSL certificate and are configured to use SNI to serve HTTPS reque...
Tue, 28 Mar, 2023 at 4:12 AM
Ensure ElastiCache Redis Cluster Automatic Backup Enabled
Description: Amazon ElastiCache for Redis is a blazing fast in-memory data store that provides sub-millisecond latency to power internet-scale real-time ap...
Thu, 31 Mar, 2022 at 1:52 AM
Ensure AWS Shield is Advanced Enabled with Auto-Renew Check
Description: AWS Shield Advanced provides enhanced protections for your applications running on protected Amazon EC2, Elastic Load Balancing (ELB), Amazon ...
Tue, 28 Mar, 2023 at 6:22 AM
Ensure API Gateway SSL Enabled
Description: This policy checks if a REST API stage uses a Secure Sockets Layer (SSL) certificate. This rule is NON_COMPLIANT if the REST API stage does no...
Tue, 28 Mar, 2023 at 6:06 AM
Ensure Shield DRT Access Enabled
Description: AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. AWS Shield provid...
Mon, 27 Mar, 2023 at 11:17 PM
Ensure API Gateway Restricted to Source IPs
Description : Amazon API Gateway is an AWS service for creating, publishing, maintaining, monitoring, and securing REST, HTTP, and WebSocket APIs at any sc...
Fri, 1 Apr, 2022 at 3:38 AM
Ensure Lambda Code is Versioned Check
Description :  You can use versions to manage the deployment of your functions. For example, you can publish a new version of a function for beta testing w...
Mon, 27 Mar, 2023 at 6:48 AM
Ensure Application Load Balancer is dropping invalid packets to prevent header based http request smuggling
Description: The Application Load Balancer is a feature of Elastic Load Balancing that allows a developer to configure and route incoming end-user traffic ...
Mon, 24 Jul, 2023 at 3:33 AM
Ensure CloudWatch Alarm Action Check
Description: You can specify what actions an alarm takes when it changes state between the OK, ALARM, and INSUFFICIENT_DATA states. The most common type of...
Mon, 27 Mar, 2023 at 7:39 AM
Ensure Cloudfront distributions are using WAF
Description: AWS WAF is a web application firewall that helps protect your web applications or APIs against common web exploits that may affect availabilit...
Tue, 28 Mar, 2023 at 7:25 AM