Policy Updates

Ensure ELB has listeners underneath
Description: An Elastic Load Balancing (ELB) load balancer must have at least one listener configured. A listener is a process that listens for connection r...
Mon, 24 Jul, 2023 at 5:10 AM
Ensure Redshift has automatic upgrades enabled
Description: Amazon Redshift engine upgrades are periodically released to include new features, bug fixes, and security patches. Enabling automatic upgrades...
Mon, 24 Jul, 2023 at 5:15 AM
Ensure EFS protects sensitive data with encryption at rest
Description: Amazon Elastic File System (EFS) is a file storage service that can be used to store sensitive data. By default, EFS data is not encrypted at r...
Mon, 24 Jul, 2023 at 5:22 AM
Ensure CloudWatch Log Groups have a retention policy of at least 365 days
Description: CloudWatch Log Groups are used to store logs from AWS resources and applications. By default, CloudWatch Log Groups retain logs for 1 day. Howe...
Mon, 24 Jul, 2023 at 5:29 AM
Ensure CloudWatch log groups are protected by AWS KMS
Description: CloudWatch log groups can be encrypted at rest using AWS KMS. This helps to protect the confidentiality of log data by making it more difficult...
Mon, 24 Jul, 2023 at 5:40 AM
Ensure DynamoDB: DAX Clusters are encrypted at rest
Description: DAX clusters can be encrypted at rest using AWS KMS. This helps to protect the confidentiality of data stored in the cluster by making it more ...
Mon, 24 Jul, 2023 at 5:44 AM
Ensure Elastic IP addresses with associations are protected by AWS Shield Advanced
Description: This policy ensures that all Elastic IP addresses (EIPs) that are associated with resources are protected by AWS Shield Advanced. This helps to...
Mon, 24 Jul, 2023 at 5:54 AM
Ensure Cloudfront distributions are protected by AWS Shield Advanced
Description: This policy ensures that all CloudFront distributions are protected by AWS Shield Advanced. This helps to protect your CloudFront distributions...
Mon, 24 Jul, 2023 at 6:00 AM
Ensure Route53 hosted zones are protected by AWS Shield Advanced
Description: This policy ensures that all Route 53 hosted zones are protected by AWS Shield Advanced. This helps to protect your Route 53 hosted zones from ...
Mon, 24 Jul, 2023 at 6:05 AM
Ensure global accelerators are protected by AWS Shield Advanced
Description: This policy ensures that all Global Accelerators are protected by AWS Shield Advanced. This helps to protect your Global Accelerators from DDoS...
Mon, 24 Jul, 2023 at 6:10 AM