CIS AWS Database Services Benchmark v1.0.0
61 articles
- Ensure Amazon VPC (Virtual Private Cloud) has been created
- Ensure the Use of Security Groups
- Ensure Data at Rest is Encrypted
- Ensure Data in Transit is Encrypted
- Ensure IAM Roles and Policies are Created
- Ensure to Enable Backup and Recovery
- Ensure Monitoring and Logging is Enabled (Manual)
- Ensure Database Audit Logging is Enabled
- Ensure Passwords are Regularly Rotated
- Ensure Access Keys are Regularly Rotated
- Ensure Least Privilege Access
- Ensure Automatic Backups and Retention Policies are configured
- Ensure Multi-Factor Authentication (MFA) is in use
- Ensure to Choose the Appropriate Database Engine
- Ensure to Create The Appropriate Deployment Configuration
- Ensure to Create a Virtual Private Cloud
- Ensure to Configure Security Groups
- Enable Encryption at Rest
- Enable Encryption in Transit
- Ensure to Implement Access Control and Authentication
- Ensure to Regularly Patch Systems
- Ensure Monitoring and Logging is Enabled
- Ensure to Enable Backup and Recovery
- Ensure to Regularly Review Security Configuration
- Ensure AWS Identity and Access Management (IAM) is in use
- Ensure Fine-Grained Access Control is implemented
- Ensure DynamoDB Encryption at Rest
- Ensure DynamoDB Encryption in Transit
- Ensure VPC Endpoints are configured
- Ensure DynamoDB Streams and AWS Lambda for Automated Compliance Checking is Enabled
- Ensure Monitor and Audit Activity is enabled
- Ensure Network Access is Secure
- Ensure to Implement Identity and Access Management (IAM)
- Ensure to Review and Update the Security Configuration
- Ensure Secure Access to ElastiCache
- Ensure Network Security is Enabled
- Ensure Encryption at Rest and in Transit is configured
- Ensure Automatic Updates and Patching are Enabled
- Ensure Virtual Private Cloud is Enabled
- Ensure Monitoring and Alerting is Enabled
- Ensure Regular Updates and Patches are Installed
- Ensure Audit Logging is Enabled
- Ensure Fine-Grained Access Control is Enabled
- Ensure Access Control and Authentication is Enabled
- Ensure Encryption in Transit is Configured
- Ensure Data Ingestion is Secure
- Ensure Monitoring and Logging is Enabled
- Ensure Security Configurations are Reviewed Regularly (Manual)
- Ensure Authentication and Access Control is Enabled
- Ensure Data at Rest and in Transit is Encrypted
- Ensure Keyspace Security is Configured
- Ensure Security Configurations are Reviewed Regularly
- Ensure to Conduct Security Assessments
- Ensure Network Architecture Planning
- Ensure to Configure Backup Window
- Ensure VPC Security is Configured
- Ensure to Implement Backup and Disaster Recovery
- Ensure Encryption at Rest is Enabled
- Ensure Encryption in Transit is Enabled
- Ensure to Implement Monitoring and Alerting
- Ensure Regular Updates and Patches