Question 1

Is point_in_time_recovery_enabled enforced for NIST SP 800-53 Rev 5?

Accepted Answer

Yes, Enable this rule to check that information has been backed up. It also maintains the backups by ensuring that point-in-time recovery is enabled in AWS DynamoDB.

Question 2

Is server_side_encryption_enabled enforced for NIST SP 800-53 Rev 5?

Accepted Answer

Yes, Ensure that encryption is enabled for your AWS DynamoDB tables. Because sensitive data can exist at rest in these tables, enable encryption at rest to help protect that data.

Question 3

Is server_side_encryption_kms_key_arn enforced for NIST SP 800-53 Rev 5?

Accepted Answer

Yes, Ensure that encryption is enabled for your AWS DynamoDB tables. Because sensitive data can exist at rest in these tables, enable encryption at rest to help protect that data.

Control	Clause	Change
DynamoDB tables should have AWS KMS encryption enableddynamodb_table_encrypted_with_kms AU-9(3)	AU-9(3)
DynamoDB tables should have encryption enableddynamodb_table_encryption_enabled AU-9(3)	AU-9(3)
DynamoDB tables should have point-in-time recovery enableddynamodb_table_point_in_time_recovery_enabled CP-1(2)	CP-1(2)

Controls