Controls
7 controls from NIST SP 800-53 Rev 5 apply to this module.
| Control | Clause | Change |
|---|---|---|
| CloudWatch log groups should have retention period of at least 365 dayscloudwatch_log_group_retention_period_365 AC-16(b) | AC-16(b) | |
| ECR repositories should have image scan on push enabledecr_repository_image_scan_on_push_enabled SI-2(2) | SI-2(2) | |
| Lambda functions should have concurrent execution limit configuredlambda_function_concurrent_execution_limit_configured None | None | |
| Lambda functions should be configured with a dead-letter queuelambda_function_dead_letter_queue_configured None | None | |
| Lambda functions should be in a VPClambda_function_in_vpc None | None | |
| Lambda functions should restrict public URLlambda_function_restrict_public_url AC-2(6) | AC-2(6) | |
| Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled AU-9(3) | AU-9(3) |