Liste der AWS Config verwalteten Regeln nach Regionen und Verfügbarkeit

• access-keys-rotated

• account-part-of-organizations

• acmpca-certificate-authority-tagged

• acm-certificate-expiration-check

• acm-certificate-rsa-check

• acm-pca-root-ca-deaktiviert

• active-mq-supported-version

• alb-desync-mode-check

• alb-http-drop-invalid-Header-fähig

• alb-http-to-https-Umleitungsprüfung

• alb-internal-scheme-check

• alb-waf-enabled

• amplify-app-branch-auto-löschung aktiviert

• amplify-app-description

• amplify-app-tagged

• amplify-branch-performance-mode-aktiviert

• amplify-branch-tagged

• api-gwv2- access-logs-enabled

• api-gwv2- authorization-type-configured

• api-gw-associated-with-WAF

• api-gw-cache-enabled-und-verschlüsselt

• api-gw-endpoint-type-überprüfen

• api-gw-execution-logging-aktiviert

• api-gw-ssl-enabled

• api-gw-xray-enabled

• appconfig-application-description

• appconfig-application-tagged

• appconfig-configuration-profile-tagged

• appconfig-configuration-profile-validators-nicht leer

• appconfig-deployment-strategy-description

• appconfig-deployment-strategy-replicate-zu-ssm

• appconfig-environment-description

• appconfig-environment-tagged

• appconfig-extension-association-tagged

• appconfig-freeform-profile-config-Speicher

• appconfig-hosted-configuration-version-Beschreibung

• appflow-flow-tagged

• appmesh-gateway-route-tagged

• appmesh-mesh-deny-tcp-Weiterleitung

• appmesh-mesh-tagged

• appmesh-route-tagged

• appmesh-virtual-gateway-backend-Standardeinstellungen-TLS

• appmesh-virtual-gateway-logging-file-path-exists

• appmesh-virtual-gateway-tagged

• appmesh-virtual-node-backend-defaults-tls-on

• appmesh-virtual-node-logging-file-path-exists

• appmesh-virtual-node-tagged

• appmesh-virtual-router-tagged

• appmesh-virtual-service-tagged

• approved-amis-by-id

• approved-amis-by-tag

• apprunner-service-in-vpc

• apprunner-service-no-public-Zugang

• apprunner-service-observability-enabled

• apprunner-service-tagged

• apprunner-vpc-connector-tagged

• appstream-fleet-in-vpc

• appsync-associated-with-waf

• appsync-authorization-check

• appsync-cache-encryption-at-ausruhen

• appsync-logging-enabled

• athena-data-catalog-description

• athena-prepared-statement-description

• athena-workgroup-description

• athena-workgroup-encrypted-at-ausruhen

• athena-workgroup-enforce-workgroup-Konfiguration

• athena-workgroup-engine-version-automatisches Upgrade

• athena-workgroup-logging-enabled

• aurora-last-backup-recovery-punkt-erstellt

• aurora-meets-restore-time-Ziel

• aurora-mysql-backtracking-enabled

• aurora-resources-in-logically-air-gapped-vault

• aurora-resources-protected-by-Backup-Plan

• autoscaling-capacity-rebalancing

• autoscaling-group-elb-healthcheck-erforderlich

• autoscaling-launchconfig-requires-imdsv2

• autoscaling-launch-config-hop-Grenze

• autoscaling-launch-config-public-ip-deaktiviert

• autoscaling-launch-template

• autoscaling-multiple-az

• autoscaling-multiple-instance-types

• aws-config-process-check

• backup-plan-min-frequency-and-min-retention-check

• backup-recovery-point-encrypted

• backup-recovery-point-manual-löschen-deaktiviert

• backup-recovery-point-minimum-Aufbewahrungsprüfung

• batch-compute-environment-enabled

• batch-compute-environment-managed

• batch-compute-environment-tagged

• batch-job-queue-enabled

• batch-job-queue-tagged

• batch-managed-compute-environment-using-launch-template

• batch-managed-compute-env-compute-resources-tagged

• batch-scheduling-policy-tagged

• beanstalk-enhanced-health-reporting-aktiviert

• beanstalk-logs-to-cloudwatch

• cassandra-keyspace-tagged

• clb-desync-mode-check

• clb-multiple-az

• cloudformation-stack-drift-detection-überprüfen

• cloudformation-stack-notification-check

• cloudtrail-all-read-s3- data-event-check

• cloudtrail-all-write-s3- data-event-check

• Wolkenspur-S3- bucket-access-logging

• cloudtrail-s3- bucket-public-access-prohibited

• cloudtrail-s3-dataevents-enabled

• cloudtrail-security-trail-enabled

• cloudwatch-alarm-action-check

• cloudwatch-alarm-action-enabled-überprüfen

• cloudwatch-alarm-resource-check

• cloudwatch-alarm-settings-check

• cloudwatch-log-group-encrypted

• cloud-trail-cloud-watch-logs-aktiviert

• cloud-trail-enabled

• cloud-trail-encryption-enabled

• cloud-trail-log-file-Validierung aktiviert

• cmk-backing-key-rotation-aktiviert

• codebuild-project-artifact-encryption

• codebuild-project-environment-privileged-überprüfen

• codebuild-project-envvar-awscred-überprüfen

• codebuild-project-logging-enabled

• codebuild-project-s3-log-verschlüsselt

• codebuild-project-source-repo-URL-Prüfung

• codebuild-report-group-encrypted-im Ruhezustand

• codedeploy-auto-rollback-monitor-aktiviert

• codedeploy-deployment-group-auto-rollback-aktiviert

• codedeploy-deployment-group-outdated-instanzen-aktualisieren

• Codedeploy-ec2- minimum-healthy-hosts-configured

• codedeploy-lambda-allatonce-traffic-shift-deaktiviert

• codeguruprofiler-profiling-group-tagged

• codegurureviewer-repository-association-tagged

• codepipeline-deployment-count-check

• codepipeline-region-fanout-check

• cognito-user-pool-advanced-sicherheitsaktiviert

• custom-eventbus-policy-attached

• custom-schema-registry-policy-angehängt

• cw-loggroup-retention-period-überprüfen

• datasync-task-data-verification-aktiviert

• datasync-task-logging-enabled

• datasync-task-tagged

• dax-encryption-enabled

• dax-tls-endpoint-encryption

• db-instance-backup-enabled

• desired-instance-tenancy

• desired-instance-type

• dms-auto-minor-version-aktualisieren-Prüfung

• dms-endpoint-ssl-configured

• dms-mongo-db-authentication-aktiviert

• dms-neptune-iam-authorization-aktiviert

• dms-redis-tls-enabled

• dms-replication-not-public

• dms-replication-task-sourcedb-Protokollierung

• dms-replication-task-targetdb-Protokollierung

• docdb-cluster-audit-logging-aktiviert

• docdb-cluster-backup-retention-überprüfen

• docdb-cluster-deletion-protection-aktiviert

• docdb-cluster-encrypted

• docdb-cluster-snapshot-public-verboten

• dynamodb-autoscaling-enabled

• dynamodb-in-backup-plan

• dynamodb-last-backup-recovery-Punkt erstellt

• dynamodb-meets-restore-time-Ziel

• dynamodb-pitr-enabled

• dynamodb-resources-protected-by-Backup-Plan

• dynamodb-table-deletion-protection-aktiviert

• dynamodb-table-encrypted-kms

• dynamodb-table-encryption-enabled

• dynamodb-throughput-limit-check

• ebs-in-backup-plan

• ebs-last-backup-recovery-punkt-erstellt

• ebs-meets-restore-time-Ziel

• ebs-optimized-instance

• ebs-resources-in-logically-air-gapped-vault

• ebs-resources-protected-by-Backup-Plan

• ebs-snapshot-public-restorable-überprüfen

• ec2- aktiviert client-vpn-connection-log

• ec2- -alle client-vpn-not-authorize

• ec2- ebs-encryption-by-default

• ec2-imdsv2-check

• ec2- instance-detailed-monitoring-enabled

• ec2- instance-managed-by-ssm

• ec2- instance-multiple-eni-check

• ec2- instance-no-public-ip

• ec2- instance-profile-attached

• ec2- erstellt last-backup-recovery-point

• ec2-2-prüfen launch-template-imdsv

• ec2- -deaktiviert launch-template-public-ip

• ec2- launch-template-tagged

• ec2- managedinstance-applications-blacklisted

• ec2- managedinstance-applications-required

• ec2- prüfen managedinstance-association-compliance-status

• ec2- managedinstance-inventory-blacklisted

• ec2- prüfen managedinstance-patch-compliance-status

• ec2- managedinstance-platform-check

• ec2- meets-restore-time-target

• ec2- no-amazon-key-pair

• ec2- prefix-list-tagged

• ec2- -Tresor mit Lücken resources-in-logically-air

• ec2- resources-protected-by-backup -plan

• ec2- -eni security-group-attached-to

• ec2- -eni-periodisch security-group-attached-to

• ec2-stopped-instance

• ec2- token-hop-limit-check

• ec2- traffic-mirror-filter-description

• ec2- traffic-mirror-filter-tagged

• ec2- traffic-mirror-session-description

• ec2- traffic-mirror-session-tagged

• ec2- traffic-mirror-target-description

• ec2- traffic-mirror-target-tagged

• ec2- -attach-deaktiviert transit-gateway-auto-vpc

• ec2- volume-inuse-check

• ec2- vpn-connection-logging-enabled

• ecr-private-image-scanning-aktiviert

• ecr-private-lifecycle-policy-konfiguriert

• ecr-private-tag-immutability-aktiviert

• ecr-repository-lifecycle-policy-konfiguriert

• ecs-awsvpc-networking-enabled

• ecs-containers-nonprivileged

• ecs-containers-readonly-access

• ecs-container-insights-enabled

• ecs-fargate-latest-platform-Version

• ecs-no-environment-secrets

• ecs-task-definition-log-Konfiguration

• ecs-task-definition-memory-hartes Limit

• ecs-task-definition-nonroot-Benutzer

• ecs-task-definition-pid-Modus-Check

• ecs-task-definition-user-for-host-mode-check

• efs-access-point-enforce-Stammverzeichnis

• efs-access-point-enforce-Benutzeridentität

• efs-automatic-backups-enabled

• efs-encrypted-check

• efs-filesystem-ct-encrypted

• efs-in-backup-plan

• efs-last-backup-recovery-Punkt erstellt

• efs-meets-restore-time-Ziel

• efs-mount-target-public-zugänglich

• efs-resources-in-logically-air-gapped-vault

• efs-resources-protected-by-Ersatzplan

• eip-attached

• eks-cluster-logging-enabled

• eks-cluster-log-enabled

• eks-cluster-oldest-supported-Ausführung

• eks-cluster-secrets-encrypted

• eks-cluster-supported-version

• eks-endpoint-no-public-Zugang

• eks-secrets-encrypted

• elasticache-auto-minor-version-aktualisieren-Prüfung

• elasticache-rbac-auth-enabled

• elasticache-redis-cluster-automatic-Backup-Check

• elasticache-repl-grp-auto-failover-fähig

• elasticache-repl-grp-encrypted-im Ruhezustand

• elasticache-repl-grp-encryptedunterwegs

• elasticache-repl-grp-redis-auth-aktiviert

• elasticache-subnet-group-check

• elasticache-supported-engine-version

• elasticbeanstalk-application-description

• elasticbeanstalk-application-version-description

• elasticbeanstalk-environment-description

• elasticsearch-encrypted-at-rest

• elasticsearch-in-vpc-only

• elasticsearch-logs-to-cloudwatch

• elasticsearch-node-to-node-Verschlüsselungsprüfung

• elasticsearch-update-check

• elastic-beanstalk-logs-to- Cloudwatch

• elastic-beanstalk-managed-updates-aktiviert

• elbv2- acm-certificate-required

• elbv2-multiple-az

• elb-acm-certificate-required

• elb-cross-zone-load-Balancing aktiviert

• elb-custom-security-policy-ssl-Überprüfung

• elb-deletion-protection-enabled

• elb-logging-enabled

• elb-predefined-security-policy-SSL-Überprüfung

• elb-tls-https-listeners-nur

• emr-block-public-access

• emr-kerberos-enabled

• emr-master-no-public-ip

• emr-security-configuration-encryption-ruh dich aus

• emr-security-configuration-encryption-Transit

• encrypted-volumes

• evidently-launch-description

• evidently-launch-tagged

• evidently-project-description

• evidently-project-tagged

• evidently-segment-description

• evidently-segment-tagged

• fis-experiment-template-log-Konfiguration vorhanden

• fis-experiment-template-tagged

• fms-network-firewall-resource-überprüfen

• fms-security-group-audit-Richtlinien-Check

• fms-shield-resource-policy-überprüfen

• fms-webacl-resource-policy-überprüfen

• fms-webacl-rulegroup-association-überprüfen

• frauddetector-entity-type-tagged

• frauddetector-label-tagged

• frauddetector-outcome-tagged

• frauddetector-variable-tagged

• fsx-last-backup-recovery-Punkt erstellt

• fsx-lustre-copy-tagszu Backups

• fsx-meets-restore-time-Ziel

• fsx-openzfs-copy-tags-aktiviert

• fsx-resources-protected-by-Backup-Plan

• fsx-windows-audit-log-konfiguriert

• global-endpoint-event-replication-aktiviert

• glue-job-logging-enabled

• glue-ml-transform-encrypted-im Ruhezustand

• guardduty-eks-protection-audit-aktiviert

• guardduty-eks-protection-runtime-aktiviert

• guardduty-enabled-centralized

• guardduty-lambda-protection-enabled

• guardduty-malware-protection-enabled

• guardduty-non-archived-findings

• guardduty-rds-protection-enabled

• GuardDuty-S3-Schutz aktiviert

• iam-customer-policy-blocked-kms-Aktionen

• iam-external-access-analyzer-aktiviert

• iam-group-has-users-überprüfen

• iam-inline-policy-blocked-kms-Aktionen

• iam-no-inline-policy-überprüfen

• iam-password-policy

• iam-policy-blacklisted-check

• iam-policy-in-use

• iam-policy-no-statements-with-admin-access

• iam-policy-no-statements-with-full-access

• iam-role-managed-policy-überprüfen

• iam-root-access-key-überprüfen

• iam-user-group-membership-überprüfen

• iam-user-mfa-enabled

• iam-user-no-policies-überprüfen

• iam-user-unused-credentials-überprüfen

• incoming-ssh-disabled

• inspector-ec2-Scan aktiviert

• inspector-ecr-scan-enabled

• inspector-lambda-code-scan-aktiviert

• inspector-lambda-standard-scan-aktiviert

• instances-in-vpc

• internet-gateway-authorized-vpc-nur

• iotevents-alarm-model-tagged

• iotevents-detector-model-tagged

• iotevents-input-tagged

• iotsitewise-asset-model-tagged

• iotsitewise-dashboard-tagged

• iotsitewise-gateway-tagged

• iotsitewise-portal-tagged

• iotsitewise-project-tagged

• iot-authorizer-token-signing-aktiviert

• kinesis-firehose-delivery-stream-verschlüsselt

• kinesis-stream-backup-retention-überprüfen

• kinesis-stream-encrypted

• kms-cmk-not-scheduled-zum Löschen

• kms-key-policy-no-öffentlicher Zugang

• lambda-concurrency-check

• lambda-dlq-check

• lambda-function-public-access-verboten

• lambda-function-settings-check

• lambda-inside-vpc

• lambda-vpc-multi-az-überprüfen

• lightsail-disk-tagged

• macie-auto-sensitive-data-Discovery-Check

• macie-status-check

• mfa-enabled-for-iam-Konsolenzugriff

• mq-active-deployment-mode

• mq-automatic-minor-version-Upgrade aktiviert

• mq-auto-minor-version-upgrade-fähig

• mq-cloudwatch-audit-logging-aktiviert

• mq-cloudwatch-audit-log-aktiviert

• mq-no-public-access

• mq-rabbit-deployment-mode

• msk-enhanced-monitoring-enabled

• msk-in-cluster-node-require-tls

• multi-region-cloud-trail-aktiviert

• nacl-no-unrestricted-ssh-rdp

• neptune-cluster-backup-retention-überprüfen

• neptune-cluster-cloudwatch-log-exportfähig

• neptune-cluster-copy-tags-to-snapshot-enabled

• neptune-cluster-deletion-protection-aktiviert

• neptune-cluster-encrypted

• neptune-cluster-iam-database-Authentifizierung

• neptune-cluster-multi-az-aktiviert

• neptune-cluster-snapshot-encrypted

• neptune-cluster-snapshot-public-verboten

• netfw-deletion-protection-enabled

• netfw-logging-enabled

• netfw-multi-az-enabled

• netfw-policy-default-action-fragment-Pakete

• netfw-policy-default-action-vollständige Pakete

• netfw-policy-rule-group-assoziiert

• netfw-stateless-rule-group-nicht leer

• nlb-internal-scheme-check

• no-unrestricted-route-to-igw

• opensearch-access-control-enabled

• opensearch-audit-logging-enabled

• opensearch-data-node-fault-Toleranz

• opensearch-encrypted-at-rest

• opensearch-https-required

• opensearch-in-vpc-only

• opensearch-logs-to-cloudwatch

• opensearch-node-to-node-Verschlüsselungsprüfung

• opensearch-primary-node-fault-Toleranz

• opensearch-update-check

• rabbit-mq-supported-version

• rds-aurora-mysql-audit-Protokollierung aktiviert

• rds-aurora-postgresql-logs-zu-Cloud-Watch

• rds-automatic-minor-version-upgrade-fähig

• rds-cluster-auto-minor-version-upgrade-enable

• rds-cluster-default-admin-überprüfen

• rds-cluster-deletion-protection-aktiviert

• rds-cluster-encrypted-at-ausruhen

• rds-cluster-iam-authentication-aktiviert

• rds-cluster-multi-az-aktiviert

• rds-enhanced-monitoring-enabled

• rds-instance-default-admin-überprüfen

• rds-instance-deletion-protection-aktiviert

• rds-instance-iam-authentication-aktiviert

• rds-instance-public-access-überprüfen

• rds-in-backup-plan

• rds-last-backup-recovery-Punkt erstellt

• rds-logging-enabled

• rds-meets-restore-time-Ziel

• rds-multi-az-support

• rds-mysql-instance-encryptedim Transit

• rds-postgresql-logs-to- Cloudwatch

• rds-postgres-instance-encryptedim Transit

• rds-resources-protected-by-Ersatzplan

• rds-snapshots-public-prohibited

• rds-snapshot-encrypted

• rds-sql-server-logszur Cloud-Überwachung

• rds-storage-encrypted

• redshift-backup-enabled

• redshift-cluster-configuration-check

• redshift-cluster-kms-enabled

• redshift-cluster-maintenancesettings-check

• redshift-cluster-parameter-group-markiert

• redshift-cluster-public-access-überprüfen

• redshift-cluster-subnet-group-Multi-Az

• redshift-default-admin-check

• redshift-default-db-name-überprüfen

• redshift-enhanced-vpc-routing-aktiviert

• redshift-require-tls-ssl

• redshift-unrestricted-port-access

• required-tags

• restricted-incoming-traffic

• root-account-hardware-mfa-aktiviert

• root-account-mfa-enabled

• nur s3- access-point-in-vpc

• s3- -Blöcke access-point-public-access

• s3- -Blöcke account-level-public-access

• s3- -Blocke-periodisch account-level-public-access

• s 3- bucket-acl-prohibited

• s-3 bucket-blacklisted-actions-prohibited

• s3- bucket-cross-region-replication -aktiviert

• s-3 bucket-default-lock-enabled

• s3 bucket-level-public-access - verboten

• s3- bucket-logging-enabled

• s-3 bucket-mfa-delete-enabled

• s-3 bucket-policy-grantee-check

• s3- bucket-policy-not-more -freizügig

• s 3- bucket-public-read-prohibited

• s-3 bucket-public-write-prohibited

• s-3 bucket-replication-enabled

• s3- bucket-server-side-encryption -aktiviert

• s-3 bucket-ssl-requests-only

• s-3 bucket-versioning-enabled

• s-3 default-encryption-kms

• s-3 event-notifications-enabled

• s3 last-backup-recovery-point - erstellt

• s3- meets-restore-time-target

• s3- resources-in-logically-air -Tresor mit Lücken

• s3 resources-protected-by-backup - -Plan

• s 3- version-lifecycle-policy-check

• sagemaker-app-image-config-markiert

• sagemaker-domain-in-vpc

• sagemaker-endpoint-configuration-kms-schlüsselkonfiguriert

• sagemaker-endpoint-config-prod-Anzahl der Instanzen

• sagemaker-image-description

• sagemaker-image-tagged

• sagemaker-model-in-vpc

• sagemaker-model-isolation-enabled

• sagemaker-notebook-instance-inside-vpc

• sagemaker-notebook-instance-kms-key-konfiguriert

• sagemaker-notebook-instance-root-Zugriffsprüfung

• sagemaker-notebook-no-direct-Internetzugang

• secretsmanager-rotation-enabled-check

• secretsmanager-scheduled-rotation-success-überprüfen

• secretsmanager-secret-periodic-rotation

• secretsmanager-secret-unused

• secretsmanager-using-cmk

• securityhub-enabled

• security-account-information-provided

• service-catalog-shared-within-Organisation

• service-vpc-endpoint-enabled

• sns-encrypted-kms

• sns-topic-message-delivery-Benachrichtigung aktiviert

• sns-topic-no-public-Zugriff

• ssm-document-not-public

• ssm-document-tagged

• step-functions-state-machine-Protokollierung aktiviert

• storagegateway-last-backup-recovery-punkt-erstellt

• storagegateway-resources-in-logically-air-gapped-vault

• storagegateway-resources-protected-by-Ersatzplan

• subnet-auto-assign-public-ip-deaktiviert

• transfer-agreement-description

• transfer-agreement-tagged

• transfer-certificate-description

• transfer-certificate-tagged

• transfer-connector-tagged

• transfer-family-server-no-ftp

• transfer-profile-tagged

• transfer-workflow-description

• transfer-workflow-tagged

• virtualmachine-last-backup-recovery-punkt-erstellt

• virtualmachine-resources-in-logically-air-gapped-vault

• virtualmachine-resources-protected-by-Ersatzplan

• vpc-default-security-group-geschlossen

• vpc-endpoint-enabled

• vpc-flow-logs-enabled

• vpc-network-acl-unused-überprüfen

• vpc-peering-dns-resolution-überprüfen

• vpc-sg-open-only-to-authorized-ports

• vpc-sg-port-restriction-überprüfen

• vpc-vpn-2-tunnels-up

• wafv2-logging-enabled

• WAF 2- rulegroup-logging-enabled

• WAF 2- rulegroup-not-empty

• WAF 2- webacl-not-empty

• waf-regional-rulegroup-not-leer

• waf-regional-rule-not-leer

• waf-regional-webacl-not-leer

• access-keys-rotated

• account-part-of-organizations

• acmpca-certificate-authority-tagged

• acm-certificate-expiration-check

• acm-certificate-rsa-check

• acm-pca-root-ca-deaktiviert

• active-mq-supported-version

• alb-desync-mode-check

• alb-http-drop-invalid-Header-fähig

• alb-http-to-https-Umleitungsprüfung

• alb-internal-scheme-check

• alb-waf-enabled

• amplify-app-branch-auto-löschung aktiviert

• amplify-app-description

• amplify-app-tagged

• amplify-branch-performance-mode-aktiviert

• amplify-branch-tagged

• api-gwv2- access-logs-enabled

• api-gwv2- authorization-type-configured

• api-gw-associated-with-WAF

• api-gw-cache-enabled-und-verschlüsselt

• api-gw-endpoint-type-überprüfen

• api-gw-execution-logging-aktiviert

• api-gw-ssl-enabled

• api-gw-xray-enabled

• appconfig-application-description

• appconfig-application-tagged

• appconfig-configuration-profile-tagged

• appconfig-configuration-profile-validators-nicht leer

• appconfig-deployment-strategy-description

• appconfig-deployment-strategy-replicate-zu-ssm

• appconfig-environment-description

• appconfig-environment-tagged

• appconfig-extension-association-tagged

• appconfig-freeform-profile-config-Speicher

• appconfig-hosted-configuration-version-Beschreibung

• appflow-flow-tagged

• appintegrations-event-integration-description

• appintegrations-event-integration-tagged

• appmesh-gateway-route-tagged

• appmesh-mesh-deny-tcp-Weiterleitung

• appmesh-mesh-tagged

• appmesh-route-tagged

• appmesh-virtual-gateway-backend-Standardeinstellungen-TLS

• appmesh-virtual-gateway-logging-file-path-exists

• appmesh-virtual-gateway-tagged

• appmesh-virtual-node-backend-defaults-tls-on

• appmesh-virtual-node-logging-file-path-exists

• appmesh-virtual-node-tagged

• appmesh-virtual-router-tagged

• appmesh-virtual-service-tagged

• approved-amis-by-id

• approved-amis-by-tag

• apprunner-service-in-vpc

• apprunner-service-no-public-Zugang

• apprunner-service-observability-enabled

• apprunner-service-tagged

• apprunner-vpc-connector-tagged

• appstream-fleet-in-vpc

• appsync-associated-with-waf

• appsync-authorization-check

• appsync-cache-ct-encryption-im Ruhezustand

• appsync-cache-ct-encryptionunterwegs

• appsync-cache-encryption-at-ausruhen

• appsync-logging-enabled

• athena-data-catalog-description

• athena-prepared-statement-description

• athena-workgroup-description

• athena-workgroup-encrypted-at-ausruhen

• athena-workgroup-enforce-workgroup-Konfiguration

• athena-workgroup-engine-version-automatisches Upgrade

• athena-workgroup-logging-enabled

• aurora-last-backup-recovery-Punkt erstellt

• aurora-meets-restore-time-Ziel

• aurora-mysql-backtracking-enabled

• aurora-resources-in-logically-air-gapped-vault

• aurora-resources-protected-by-Ersatzplan

• autoscaling-capacity-rebalancing

• autoscaling-group-elb-healthcheck-erforderlich

• autoscaling-launchconfig-requires-imdsv2

• autoscaling-launch-config-hop-Grenze

• autoscaling-launch-config-public-ip-deaktiviert

• autoscaling-launch-template

• autoscaling-multiple-az

• autoscaling-multiple-instance-types

• aws-config-process-check

• backup-plan-min-frequency-and-min-retention-check

• backup-recovery-point-encrypted

• backup-recovery-point-manual-löschen-deaktiviert

• backup-recovery-point-minimum-Aufbewahrungsprüfung

• batch-compute-environment-enabled

• batch-compute-environment-managed

• batch-compute-environment-tagged

• batch-job-queue-enabled

• batch-job-queue-tagged

• batch-managed-compute-environment-using-launch-template

• batch-managed-compute-env-compute-resources-tagged

• batch-scheduling-policy-tagged

• beanstalk-enhanced-health-reporting-aktiviert

• beanstalk-logs-to-cloudwatch

• cassandra-keyspace-tagged

• clb-desync-mode-check

• clb-multiple-az

• cloudformation-stack-drift-detection-überprüfen

• cloudformation-stack-notification-check

• cloudfront-accesslogs-enabled

• cloudfront-associated-with-waf

• cloudfront-custom-ssl-certificate

• cloudfront-default-root-object-konfiguriert

• cloudfront-no-deprecated-ssl-Protokolle

• cloudfront-origin-access-identity-aktiviert

• cloudfront-origin-failover-enabled

• Cloudfront-S3- origin-access-control-enabled

• Wolkenfront - 3- origin-non-existent-bucket

• cloudfront-security-policy-check

• cloudfront-sni-enabled

• cloudfront-traffic-to-origin-verschlüsselt

• cloudfront-viewer-policy-https

• cloudtrail-all-read-s3- data-event-check

• cloudtrail-all-write-s3- data-event-check

• Wolkenspur-S3- bucket-access-logging

• cloudtrail-s3- bucket-public-access-prohibited

• cloudtrail-s3-dataevents-enabled

• cloudtrail-security-trail-enabled

• cloudwatch-alarm-action-check

• cloudwatch-alarm-action-enabled-überprüfen

• cloudwatch-alarm-resource-check

• cloudwatch-alarm-settings-check

• cloudwatch-log-group-encrypted

• cloud-trail-cloud-watch-logs-aktiviert

• cloud-trail-enabled

• cloud-trail-encryption-enabled

• cloud-trail-log-file-Validierung aktiviert

• cmk-backing-key-rotation-aktiviert

• codebuild-project-artifact-encryption

• codebuild-project-environment-privileged-überprüfen

• codebuild-project-envvar-awscred-überprüfen

• codebuild-project-logging-enabled

• codebuild-project-s3-log-verschlüsselt

• codebuild-project-source-repo-URL-Prüfung

• codebuild-report-group-encrypted-im Ruhezustand

• codedeploy-auto-rollback-monitor-aktiviert

• codedeploy-deployment-group-auto-rollback-aktiviert

• codedeploy-deployment-group-outdated-instanzen-aktualisieren

• Codedeploy-ec2- minimum-healthy-hosts-configured

• codedeploy-lambda-allatonce-traffic-shift-deaktiviert

• codeguruprofiler-profiling-group-tagged

• codegurureviewer-repository-association-tagged

• codepipeline-deployment-count-check

• codepipeline-region-fanout-check

• cognito-user-pool-advanced-sicherheitsaktiviert

• customerprofiles-object-type-allow-Profilerstellung

• customerprofiles-object-type-tagged

• custom-eventbus-policy-attached

• custom-schema-registry-policy-beigefügt

• cw-loggroup-retention-period-überprüfen

• datasync-task-data-verification-aktiviert

• datasync-task-logging-enabled

• datasync-task-tagged

• dax-encryption-enabled

• dax-tls-endpoint-encryption

• db-instance-backup-enabled

• desired-instance-tenancy

• desired-instance-type

• dms-auto-minor-version-aktualisieren-Prüfung

• dms-endpoint-ssl-configured

• dms-mongo-db-authentication-aktiviert

• dms-neptune-iam-authorization-aktiviert

• dms-redis-tls-enabled

• dms-replication-not-public

• dms-replication-task-sourcedb-Protokollierung

• dms-replication-task-targetdb-Protokollierung

• docdb-cluster-audit-logging-aktiviert

• docdb-cluster-backup-retention-überprüfen

• docdb-cluster-deletion-protection-aktiviert

• docdb-cluster-encrypted

• docdb-cluster-snapshot-public-verboten

• dynamodb-autoscaling-enabled

• dynamodb-in-backup-plan

• dynamodb-last-backup-recovery-Punkt erstellt

• dynamodb-meets-restore-time-Ziel

• dynamodb-pitr-enabled

• dynamodb-resources-protected-by-Ersatzplan

• dynamodb-table-deletion-protection-aktiviert

• dynamodb-table-encrypted-kms

• dynamodb-table-encryption-enabled

• dynamodb-throughput-limit-check

• ebs-in-backup-plan

• ebs-last-backup-recovery-punkt-erstellt

• ebs-meets-restore-time-Ziel

• ebs-optimized-instance

• ebs-resources-in-logically-air-gapped-vault

• ebs-resources-protected-by-Ersatzplan

• ebs-snapshot-public-restorable-überprüfen

• ec2- aktiviert client-vpn-connection-log

• ec2- -alle client-vpn-not-authorize

• ec2- ebs-encryption-by-default

• ec2-imdsv2-check

• ec2- instance-detailed-monitoring-enabled

• ec2- instance-managed-by-ssm

• ec2- instance-multiple-eni-check

• ec2- instance-no-public-ip

• ec2- instance-profile-attached

• ec2- erstellt last-backup-recovery-point

• ec2-2-prüfen launch-template-imdsv

• ec2- -deaktiviert launch-template-public-ip

• ec2- launch-template-tagged

• ec2- managedinstance-applications-blacklisted

• ec2- managedinstance-applications-required

• ec2- prüfen managedinstance-association-compliance-status

• ec2- managedinstance-inventory-blacklisted

• ec2- prüfen managedinstance-patch-compliance-status

• ec2- managedinstance-platform-check

• ec2- meets-restore-time-target

• ec2- no-amazon-key-pair

• ec2- paravirtual-instance-check

• ec2- prefix-list-tagged

• ec2- -Tresor mit Lücken resources-in-logically-air

• ec2- resources-protected-by-backup -plan

• ec2- -eni security-group-attached-to

• ec2- -eni-periodisch security-group-attached-to

• ec2-stopped-instance

• ec2- token-hop-limit-check

• ec2- traffic-mirror-filter-description

• ec2- traffic-mirror-filter-tagged

• ec2- traffic-mirror-session-description

• ec2- traffic-mirror-session-tagged

• ec2- traffic-mirror-target-description

• ec2- traffic-mirror-target-tagged

• ec2- -attach-deaktiviert transit-gateway-auto-vpc

• ec2- volume-inuse-check

• ec2- vpn-connection-logging-enabled

• ecr-private-image-scanning-aktiviert

• ecr-private-lifecycle-policy-konfiguriert

• ecr-private-tag-immutability-aktiviert

• ecr-repository-lifecycle-policy-konfiguriert

• ecs-awsvpc-networking-enabled

• ecs-containers-nonprivileged

• ecs-containers-readonly-access

• ecs-container-insights-enabled

• ecs-fargate-latest-platform-Version

• ecs-no-environment-secrets

• ecs-task-definition-log-Konfiguration

• ecs-task-definition-memory-hartes Limit

• ecs-task-definition-nonroot-Benutzer

• ecs-task-definition-pid-Modus-Check

• ecs-task-definition-user-for-host-mode-check

• efs-access-point-enforce-Stammverzeichnis

• efs-access-point-enforce-Benutzeridentität

• efs-automatic-backups-enabled

• efs-encrypted-check

• efs-filesystem-ct-encrypted

• efs-in-backup-plan

• efs-last-backup-recovery-Punkt erstellt

• efs-meets-restore-time-Ziel

• efs-mount-target-public-zugänglich

• efs-resources-in-logically-air-gapped-vault

• efs-resources-protected-by-Ersatzplan

• eip-attached

• eks-cluster-logging-enabled

• eks-cluster-log-enabled

• eks-cluster-oldest-supported-Ausführung

• eks-cluster-secrets-encrypted

• eks-cluster-supported-version

• eks-endpoint-no-public-Zugang

• eks-secrets-encrypted

• elasticache-auto-minor-version-aktualisieren-Prüfung

• elasticache-rbac-auth-enabled

• elasticache-redis-cluster-automatic-Backup-Check

• elasticache-repl-grp-auto-failover-fähig

• elasticache-repl-grp-encrypted-im Ruhezustand

• elasticache-repl-grp-encryptedunterwegs

• elasticache-repl-grp-redis-auth-aktiviert

• elasticache-subnet-group-check

• elasticache-supported-engine-version

• elasticbeanstalk-application-description

• elasticbeanstalk-application-version-description

• elasticbeanstalk-environment-description

• elasticsearch-encrypted-at-rest

• elasticsearch-in-vpc-only

• elasticsearch-logs-to-cloudwatch

• elasticsearch-node-to-node-Verschlüsselungsprüfung

• elasticsearch-update-check

• elastic-beanstalk-logs-to- Cloudwatch

• elastic-beanstalk-managed-updates-aktiviert

• elbv2- acm-certificate-required

• elbv2-multiple-az

• elb-acm-certificate-required

• elb-cross-zone-load-Balancing aktiviert

• elb-custom-security-policy-ssl-Überprüfung

• elb-deletion-protection-enabled

• elb-logging-enabled

• elb-predefined-security-policy-SSL-Überprüfung

• elb-tls-https-listeners-nur

• emr-block-public-access

• emr-kerberos-enabled

• emr-master-no-public-ip

• emr-security-configuration-encryption-ruh dich aus

• emr-security-configuration-encryption-Transit

• encrypted-volumes

• evidently-launch-description

• evidently-launch-tagged

• evidently-project-description

• evidently-project-tagged

• evidently-segment-description

• evidently-segment-tagged

• fis-experiment-template-log-Konfiguration vorhanden

• fis-experiment-template-tagged

• fms-network-firewall-resource-überprüfen

• fms-security-group-audit-Richtlinien-Check

• fms-shield-resource-policy-überprüfen

• fms-webacl-resource-policy-überprüfen

• fms-webacl-rulegroup-association-überprüfen

• frauddetector-entity-type-tagged

• frauddetector-label-tagged

• frauddetector-outcome-tagged

• frauddetector-variable-tagged

• fsx-last-backup-recovery-Punkt erstellt

• fsx-lustre-copy-tagszu Backups

• fsx-meets-restore-time-Ziel

• fsx-openzfs-copy-tags-aktiviert

• fsx-resources-protected-by-Backup-Plan

• fsx-windows-audit-log-konfiguriert

• global-endpoint-event-replication-aktiviert

• glue-job-logging-enabled

• glue-ml-transform-encrypted-im Ruhezustand

• guardduty-eks-protection-audit-aktiviert

• guardduty-eks-protection-runtime-aktiviert

• guardduty-enabled-centralized

• guardduty-lambda-protection-enabled

• guardduty-malware-protection-enabled

• guardduty-non-archived-findings

• guardduty-rds-protection-enabled

• GuardDuty-S3-Schutz aktiviert

• iam-customer-policy-blocked-kms-Aktionen

• iam-external-access-analyzer-aktiviert

• iam-group-has-users-überprüfen

• iam-inline-policy-blocked-kms-Aktionen

• iam-no-inline-policy-überprüfen

• iam-password-policy

• iam-policy-blacklisted-check

• iam-policy-in-use

• iam-policy-no-statements-with-admin-access

• iam-policy-no-statements-with-full-access

• iam-role-managed-policy-überprüfen

• iam-root-access-key-überprüfen

• iam-server-certificate-expiration-überprüfen

• iam-user-group-membership-überprüfen

• iam-user-mfa-enabled

• iam-user-no-policies-überprüfen

• iam-user-unused-credentials-überprüfen

• incoming-ssh-disabled

• inspector-ec2-Scan aktiviert

• inspector-ecr-scan-enabled

• inspector-lambda-code-scan-aktiviert

• inspector-lambda-standard-scan-aktiviert

• instances-in-vpc

• internet-gateway-authorized-vpc-nur

• iotevents-alarm-model-tagged

• iotevents-detector-model-tagged

• iotevents-input-tagged

• iotsitewise-asset-model-tagged

• iotsitewise-dashboard-tagged

• iotsitewise-gateway-tagged

• iotsitewise-portal-tagged

• iotsitewise-project-tagged

• iottwinmaker-entity-tagged

• iottwinmaker-scene-tagged

• iottwinmaker-sync-job-tagged

• iottwinmaker-workspace-tagged

• iotwireless-fuota-task-tagged

• iotwireless-multicast-group-tagged

• iotwireless-service-profile-tagged

• iot-authorizer-token-signing-aktiviert

• ivs-channel-playback-authorization-aktiviert

• ivs-channel-tagged

• ivs-playback-key-pair-markiert

• ivs-recording-configuration-tagged

• kinesis-firehose-delivery-stream-verschlüsselt

• kinesis-stream-backup-retention-überprüfen

• kinesis-stream-encrypted

• kms-cmk-not-scheduled-zum Löschen

• kms-key-policy-no-öffentlicher Zugang

• lambda-concurrency-check

• lambda-dlq-check

• lambda-function-public-access-verboten

• lambda-function-settings-check

• lambda-inside-vpc

• lambda-vpc-multi-az-überprüfen

• lightsail-disk-tagged

• macie-auto-sensitive-data-Discovery-Check

• macie-status-check

• mfa-enabled-for-iam-Konsolenzugriff

• mq-active-deployment-mode

• mq-automatic-minor-version-Upgrade aktiviert

• mq-auto-minor-version-upgrade-fähig

• mq-cloudwatch-audit-logging-aktiviert

• mq-cloudwatch-audit-log-aktiviert

• mq-no-public-access

• mq-rabbit-deployment-mode

• msk-enhanced-monitoring-enabled

• msk-in-cluster-node-require-tls

• multi-region-cloud-trail-aktiviert

• nacl-no-unrestricted-ssh-rdp

• neptune-cluster-backup-retention-überprüfen

• neptune-cluster-cloudwatch-log-exportfähig

• neptune-cluster-copy-tags-to-snapshot-enabled

• neptune-cluster-deletion-protection-aktiviert

• neptune-cluster-encrypted

• neptune-cluster-iam-database-Authentifizierung

• neptune-cluster-multi-az-aktiviert

• neptune-cluster-snapshot-encrypted

• neptune-cluster-snapshot-public-verboten

• netfw-deletion-protection-enabled

• netfw-logging-enabled

• netfw-multi-az-enabled

• netfw-policy-default-action-fragment-Pakete

• netfw-policy-default-action-vollständige Pakete

• netfw-policy-rule-group-assoziiert

• netfw-stateless-rule-group-nicht leer

• nlb-internal-scheme-check

• no-unrestricted-route-to-igw

• opensearch-access-control-enabled

• opensearch-audit-logging-enabled

• opensearch-data-node-fault-Toleranz

• opensearch-encrypted-at-rest

• opensearch-https-required

• opensearch-in-vpc-only

• opensearch-logs-to-cloudwatch

• opensearch-node-to-node-Verschlüsselungsprüfung

• opensearch-primary-node-fault-Toleranz

• opensearch-update-check

• rabbit-mq-supported-version

• rds-aurora-mysql-audit-Protokollierung aktiviert

• rds-aurora-postgresql-logs-zu-Cloud-Watch

• rds-automatic-minor-version-upgrade-fähig

• rds-cluster-auto-minor-version-upgrade-enable

• rds-cluster-default-admin-überprüfen

• rds-cluster-deletion-protection-aktiviert

• rds-cluster-encrypted-at-ausruhen

• rds-cluster-iam-authentication-aktiviert

• rds-cluster-multi-az-aktiviert

• rds-db-security-group-nicht erlaubt

• rds-enhanced-monitoring-enabled

• rds-instance-default-admin-überprüfen

• rds-instance-deletion-protection-aktiviert

• rds-instance-iam-authentication-aktiviert

• rds-instance-public-access-überprüfen

• rds-in-backup-plan

• rds-last-backup-recovery-Punkt erstellt

• rds-logging-enabled

• rds-meets-restore-time-Ziel

• rds-multi-az-support

• rds-mysql-instance-encryptedim Transit

• rds-postgresql-logs-to- Cloudwatch

• rds-postgres-instance-encryptedim Transit

• rds-resources-protected-by-Ersatzplan

• rds-snapshots-public-prohibited

• rds-snapshot-encrypted

• rds-sql-server-logszur Cloud-Überwachung

• rds-storage-encrypted

• redshift-backup-enabled

• redshift-cluster-configuration-check

• redshift-cluster-kms-enabled

• redshift-cluster-maintenancesettings-check

• redshift-cluster-parameter-group-markiert

• redshift-cluster-public-access-überprüfen

• redshift-cluster-subnet-group-Multi-Az

• redshift-default-admin-check

• redshift-default-db-name-überprüfen

• redshift-enhanced-vpc-routing-aktiviert

• redshift-require-tls-ssl

• redshift-unrestricted-port-access

• required-tags

• restricted-incoming-traffic

• root-account-hardware-mfa-aktiviert

• root-account-mfa-enabled

• Route 53- query-logging-enabled

• nur s3- access-point-in-vpc

• s3- -Blöcke access-point-public-access

• s3- -Blöcke account-level-public-access

• s3- -Blocke-periodisch account-level-public-access

• s 3- bucket-acl-prohibited

• s-3 bucket-blacklisted-actions-prohibited

• s3- bucket-cross-region-replication -aktiviert

• s-3 bucket-default-lock-enabled

• s3 bucket-level-public-access - verboten

• s3- bucket-logging-enabled

• s-3 bucket-mfa-delete-enabled

• s-3 bucket-policy-grantee-check

• s3- bucket-policy-not-more -freizügig

• s 3- bucket-public-read-prohibited

• s-3 bucket-public-write-prohibited

• s-3 bucket-replication-enabled

• s3- bucket-server-side-encryption -aktiviert

• s-3 bucket-ssl-requests-only

• s-3 bucket-versioning-enabled

• s-3 default-encryption-kms

• s-3 event-notifications-enabled

• s3 last-backup-recovery-point - erstellt

• s3- meets-restore-time-target

• s3- resources-in-logically-air -Tresor mit Lücken

• s3 resources-protected-by-backup - -Plan

• s 3- version-lifecycle-policy-check

• sagemaker-app-image-config-markiert

• sagemaker-domain-in-vpc

• sagemaker-endpoint-configuration-kms-schlüsselkonfiguriert

• sagemaker-endpoint-config-prod-Anzahl der Instanzen

• sagemaker-image-description

• sagemaker-image-tagged

• sagemaker-model-in-vpc

• sagemaker-model-isolation-enabled

• sagemaker-notebook-instance-inside-vpc

• sagemaker-notebook-instance-kms-key-konfiguriert

• sagemaker-notebook-instance-root-Zugriffsprüfung

• sagemaker-notebook-no-direct-Internetzugang

• secretsmanager-rotation-enabled-check

• secretsmanager-scheduled-rotation-success-überprüfen

• secretsmanager-secret-periodic-rotation

• secretsmanager-secret-unused

• secretsmanager-using-cmk

• securityhub-enabled

• security-account-information-provided

• service-catalog-shared-within-Organisation

• service-vpc-endpoint-enabled

• ses-malware-scanning-enabled

• shield-advanced-enabled-autorenew

• shield-drt-access

• sns-encrypted-kms

• sns-topic-message-delivery-Benachrichtigung aktiviert

• sns-topic-no-public-Zugriff

• ssm-document-not-public

• ssm-document-tagged

• step-functions-state-machine-Protokollierung aktiviert

• storagegateway-last-backup-recovery-punkt-erstellt

• storagegateway-resources-in-logically-air-gapped-vault

• storagegateway-resources-protected-by-Ersatzplan

• subnet-auto-assign-public-ip-deaktiviert

• transfer-agreement-description

• transfer-agreement-tagged

• transfer-certificate-description

• transfer-certificate-tagged

• transfer-connector-tagged

• transfer-family-server-no-ftp

• transfer-profile-tagged

• transfer-workflow-description

• transfer-workflow-tagged

• virtualmachine-last-backup-recovery-punkt-erstellt

• virtualmachine-resources-in-logically-air-gapped-vault

• virtualmachine-resources-protected-by-Ersatzplan

• vpc-default-security-group-geschlossen

• vpc-endpoint-enabled

• vpc-flow-logs-enabled

• vpc-network-acl-unused-überprüfen

• vpc-peering-dns-resolution-überprüfen

• vpc-sg-open-only-to-authorized-ports

• vpc-sg-port-restriction-überprüfen

• vpc-vpn-2-tunnels-up

• wafv2-logging-enabled

• WAF 2- rulegroup-logging-enabled

• WAF 2- rulegroup-not-empty

• WAF 2- webacl-not-empty

• waf-classic-logging-enabled

• waf-global-rulegroup-not-leer

• waf-global-rule-not-leer

• waf-global-webacl-not-leer

• waf-regional-rulegroup-not-leer

• waf-regional-rule-not-leer

• waf-regional-webacl-not-leer

• workspaces-root-volume-encryption-aktiviert

• workspaces-user-volume-encryption-aktiviert

• access-keys-rotated

• account-part-of-organizations

• acmpca-certificate-authority-tagged

• acm-certificate-expiration-check

• acm-certificate-rsa-check

• acm-pca-root-ca-deaktiviert

• active-mq-supported-version

• alb-desync-mode-check

• alb-http-drop-invalid-Header-fähig

• alb-http-to-https-Umleitungsprüfung

• alb-internal-scheme-check

• alb-waf-enabled

• amplify-app-branch-auto-löschung aktiviert

• amplify-app-description

• amplify-app-tagged

• amplify-branch-performance-mode-aktiviert

• amplify-branch-tagged

• api-gwv2- access-logs-enabled

• api-gwv2- authorization-type-configured

• api-gw-associated-with-WAF

• api-gw-cache-enabled-und-verschlüsselt

• api-gw-endpoint-type-überprüfen

• api-gw-execution-logging-aktiviert

• api-gw-ssl-enabled

• api-gw-xray-enabled

• appconfig-application-description

• appconfig-application-tagged

• appconfig-configuration-profile-tagged

• appconfig-configuration-profile-validators-nicht leer

• appconfig-deployment-strategy-description

• appconfig-deployment-strategy-replicate-zu-ssm

• appconfig-environment-description

• appconfig-environment-tagged

• appconfig-extension-association-tagged

• appconfig-freeform-profile-config-Speicher

• appconfig-hosted-configuration-version-Beschreibung

• appflow-flow-tagged

• appmesh-gateway-route-tagged

• appmesh-mesh-deny-tcp-Weiterleitung

• appmesh-mesh-tagged

• appmesh-route-tagged

• appmesh-virtual-gateway-backend-Standards-tls

• appmesh-virtual-gateway-logging-file-path-exists

• appmesh-virtual-gateway-tagged

• appmesh-virtual-node-backend-defaults-tls-on

• appmesh-virtual-node-logging-file-path-exists

• appmesh-virtual-node-tagged

• appmesh-virtual-router-tagged

• appmesh-virtual-service-tagged

• approved-amis-by-id

• approved-amis-by-tag

• appsync-associated-with-waf

• appsync-authorization-check

• appsync-cache-encryption-at-ausruhen

• appsync-logging-enabled

• athena-data-catalog-description

• athena-prepared-statement-description

• athena-workgroup-description

• athena-workgroup-encrypted-at-ausruhen

• athena-workgroup-enforce-workgroup-Konfiguration

• athena-workgroup-engine-version-automatisches Upgrade

• athena-workgroup-logging-enabled

• aurora-last-backup-recovery-Punkt erstellt

• aurora-meets-restore-time-Ziel

• aurora-mysql-backtracking-enabled

• aurora-resources-in-logically-air-gapped-vault

• aurora-resources-protected-by-Ersatzplan

• autoscaling-capacity-rebalancing

• autoscaling-group-elb-healthcheck-erforderlich

• autoscaling-launchconfig-requires-imdsv2

• autoscaling-launch-config-hop-Grenze

• autoscaling-launch-config-public-ip-deaktiviert

• autoscaling-launch-template

• autoscaling-multiple-az

• autoscaling-multiple-instance-types

• aws-config-process-check

• backup-plan-min-frequency-and-min-retention-check

• backup-recovery-point-encrypted

• backup-recovery-point-manual-löschen-deaktiviert

• backup-recovery-point-minimum-Aufbewahrungsprüfung

• batch-compute-environment-enabled

• batch-compute-environment-managed

• batch-compute-environment-tagged

• batch-job-queue-enabled

• batch-job-queue-tagged

• batch-managed-compute-environment-using-launch-template

• batch-managed-compute-env-compute-resources-tagged

• batch-scheduling-policy-tagged

• beanstalk-enhanced-health-reporting-aktiviert

• beanstalk-logs-to-cloudwatch

• cassandra-keyspace-tagged

• clb-desync-mode-check

• clb-multiple-az

• cloudformation-stack-drift-detection-überprüfen

• cloudformation-stack-notification-check

• cloudtrail-all-read-s3- data-event-check

• cloudtrail-all-write-s3- data-event-check

• Wolkenspur-S3- bucket-access-logging

• cloudtrail-s3- bucket-public-access-prohibited

• cloudtrail-s3-dataevents-enabled

• cloudtrail-security-trail-enabled

• cloudwatch-alarm-action-check

• cloudwatch-alarm-action-enabled-überprüfen

• cloudwatch-alarm-resource-check

• cloudwatch-alarm-settings-check

• cloudwatch-log-group-encrypted

• cloud-trail-cloud-watch-logs-aktiviert

• cloud-trail-enabled

• cloud-trail-encryption-enabled

• cloud-trail-log-file-Validierung aktiviert

• cmk-backing-key-rotation-aktiviert

• codebuild-project-artifact-encryption

• codebuild-project-environment-privileged-überprüfen

• codebuild-project-envvar-awscred-überprüfen

• codebuild-project-logging-enabled

• codebuild-project-s3-log-verschlüsselt

• codebuild-project-source-repo-URL-Prüfung

• codebuild-report-group-encrypted-im Ruhezustand

• codedeploy-auto-rollback-monitor-aktiviert

• codedeploy-deployment-group-auto-rollback-aktiviert

• codedeploy-deployment-group-outdated-instanzen-aktualisieren

• Codedeploy-ec2- minimum-healthy-hosts-configured

• codedeploy-lambda-allatonce-traffic-shift-deaktiviert

• codepipeline-deployment-count-check

• codepipeline-region-fanout-check

• cognito-user-pool-advanced-sicherheitsaktiviert

• custom-eventbus-policy-attached

• custom-schema-registry-policy-angehängt

• cw-loggroup-retention-period-überprüfen

• datasync-task-data-verification-aktiviert

• datasync-task-logging-enabled

• datasync-task-tagged

• dax-encryption-enabled

• dax-tls-endpoint-encryption

• db-instance-backup-enabled

• desired-instance-tenancy

• desired-instance-type

• dms-auto-minor-version-aktualisieren-Prüfung

• dms-endpoint-ssl-configured

• dms-mongo-db-authentication-aktiviert

• dms-neptune-iam-authorization-aktiviert

• dms-redis-tls-enabled

• dms-replication-not-public

• dms-replication-task-sourcedb-Protokollierung

• dms-replication-task-targetdb-Protokollierung

• dynamodb-autoscaling-enabled

• dynamodb-in-backup-plan

• dynamodb-last-backup-recovery-Punkt erstellt

• dynamodb-meets-restore-time-Ziel

• dynamodb-pitr-enabled

• dynamodb-resources-protected-by-Ersatzplan

• dynamodb-table-deletion-protection-aktiviert

• dynamodb-table-encrypted-kms

• dynamodb-table-encryption-enabled

• dynamodb-throughput-limit-check

• ebs-in-backup-plan

• ebs-last-backup-recovery-punkt-erstellt

• ebs-meets-restore-time-Ziel

• ebs-optimized-instance

• ebs-resources-in-logically-air-gapped-vault

• ebs-resources-protected-by-Ersatzplan

• ebs-snapshot-public-restorable-überprüfen

• ec2- aktiviert client-vpn-connection-log

• ec2- -alle client-vpn-not-authorize

• ec2- ebs-encryption-by-default

• ec2-imdsv2-check

• ec2- instance-detailed-monitoring-enabled

• ec2- instance-managed-by-ssm

• ec2- instance-multiple-eni-check

• ec2- instance-no-public-ip

• ec2- instance-profile-attached

• ec2- erstellt last-backup-recovery-point

• ec2-2-prüfen launch-template-imdsv

• ec2- -deaktiviert launch-template-public-ip

• ec2- launch-template-tagged

• ec2- managedinstance-applications-blacklisted

• ec2- managedinstance-applications-required

• ec2- prüfen managedinstance-association-compliance-status

• ec2- managedinstance-inventory-blacklisted

• ec2- prüfen managedinstance-patch-compliance-status

• ec2- managedinstance-platform-check

• ec2- meets-restore-time-target

• ec2- no-amazon-key-pair

• ec2- paravirtual-instance-check

• ec2- prefix-list-tagged

• ec2- -Tresor mit Lücken resources-in-logically-air

• ec2- resources-protected-by-backup -plan

• ec2- -eni security-group-attached-to

• ec2- -eni-periodisch security-group-attached-to

• ec2-stopped-instance

• ec2- token-hop-limit-check

• ec2- traffic-mirror-filter-description

• ec2- traffic-mirror-filter-tagged

• ec2- traffic-mirror-session-description

• ec2- traffic-mirror-session-tagged

• ec2- traffic-mirror-target-description

• ec2- traffic-mirror-target-tagged

• ec2- -attach-deaktiviert transit-gateway-auto-vpc

• ec2- volume-inuse-check

• ec2- vpn-connection-logging-enabled

• ecr-private-image-scanning-aktiviert

• ecr-private-lifecycle-policy-konfiguriert

• ecr-private-tag-immutability-aktiviert

• ecr-repository-lifecycle-policy-konfiguriert

• ecs-awsvpc-networking-enabled

• ecs-containers-nonprivileged

• ecs-containers-readonly-access

• ecs-container-insights-enabled

• ecs-fargate-latest-platform-Version

• ecs-no-environment-secrets

• ecs-task-definition-log-Konfiguration

• ecs-task-definition-memory-hartes Limit

• ecs-task-definition-nonroot-Benutzer

• ecs-task-definition-pid-Modus-Check

• ecs-task-definition-user-for-host-mode-check

• efs-access-point-enforce-Stammverzeichnis

• efs-access-point-enforce-Benutzeridentität

• efs-automatic-backups-enabled

• efs-encrypted-check

• efs-filesystem-ct-encrypted

• efs-in-backup-plan

• efs-last-backup-recovery-Punkt erstellt

• efs-meets-restore-time-Ziel

• efs-mount-target-public-zugänglich

• efs-resources-in-logically-air-gapped-vault

• efs-resources-protected-by-Ersatzplan

• eip-attached

• eks-cluster-logging-enabled

• eks-cluster-log-enabled

• eks-cluster-oldest-supported-Ausführung

• eks-cluster-secrets-encrypted

• eks-cluster-supported-version

• eks-endpoint-no-public-Zugang

• eks-secrets-encrypted

• elasticache-auto-minor-version-aktualisieren-Prüfung

• elasticache-rbac-auth-enabled

• elasticache-redis-cluster-automatic-Backup-Check

• elasticache-repl-grp-auto-failover-fähig

• elasticache-repl-grp-encrypted-im Ruhezustand

• elasticache-repl-grp-encryptedunterwegs

• elasticache-repl-grp-redis-auth-aktiviert

• elasticache-subnet-group-check

• elasticache-supported-engine-version

• elasticbeanstalk-application-description

• elasticbeanstalk-application-version-description

• elasticbeanstalk-environment-description

• elasticsearch-encrypted-at-rest

• elasticsearch-in-vpc-only

• elasticsearch-logs-to-cloudwatch

• elasticsearch-node-to-node-Verschlüsselungsprüfung

• elasticsearch-update-check

• elastic-beanstalk-logs-to- Cloudwatch

• elastic-beanstalk-managed-updates-aktiviert

• elbv2- acm-certificate-required

• elbv2-multiple-az

• elb-acm-certificate-required

• elb-cross-zone-load-Balancing aktiviert

• elb-custom-security-policy-ssl-Überprüfung

• elb-deletion-protection-enabled

• elb-logging-enabled

• elb-predefined-security-policy-SSL-Überprüfung

• elb-tls-https-listeners-nur

• emr-block-public-access

• emr-kerberos-enabled

• emr-master-no-public-ip

• emr-security-configuration-encryption-ruh dich aus

• emr-security-configuration-encryption-Transit

• encrypted-volumes

• fis-experiment-template-log-Konfiguration vorhanden

• fis-experiment-template-tagged

• fms-network-firewall-resource-überprüfen

• fms-security-group-audit-Richtlinien-Check

• fms-shield-resource-policy-überprüfen

• fms-webacl-resource-policy-überprüfen

• fms-webacl-rulegroup-association-überprüfen

• fsx-last-backup-recovery-Punkt erstellt

• fsx-lustre-copy-tagszu Backups

• fsx-meets-restore-time-Ziel

• fsx-openzfs-copy-tags-aktiviert

• fsx-resources-protected-by-Backup-Plan

• fsx-windows-audit-log-konfiguriert

• global-endpoint-event-replication-aktiviert

• glue-job-logging-enabled

• glue-ml-transform-encrypted-im Ruhezustand

• guardduty-eks-protection-audit-aktiviert

• guardduty-eks-protection-runtime-aktiviert

• guardduty-enabled-centralized

• guardduty-lambda-protection-enabled

• guardduty-malware-protection-enabled

• guardduty-non-archived-findings

• guardduty-rds-protection-enabled

• GuardDuty-S3-Schutz aktiviert

• iam-customer-policy-blocked-kms-Aktionen

• iam-external-access-analyzer-aktiviert

• iam-group-has-users-überprüfen

• iam-inline-policy-blocked-kms-Aktionen

• iam-no-inline-policy-überprüfen

• iam-password-policy

• iam-policy-blacklisted-check

• iam-policy-in-use

• iam-policy-no-statements-with-admin-access

• iam-policy-no-statements-with-full-access

• iam-role-managed-policy-überprüfen

• iam-root-access-key-überprüfen

• iam-user-group-membership-überprüfen

• iam-user-mfa-enabled

• iam-user-no-policies-überprüfen

• iam-user-unused-credentials-überprüfen

• incoming-ssh-disabled

• inspector-ec2-Scan aktiviert

• inspector-ecr-scan-enabled

• inspector-lambda-standard-scan-aktiviert

• instances-in-vpc

• internet-gateway-authorized-vpc-nur

• iot-authorizer-token-signing-aktiviert

• kinesis-firehose-delivery-stream-verschlüsselt

• kinesis-stream-backup-retention-überprüfen

• kinesis-stream-encrypted

• kms-cmk-not-scheduled-zum Löschen

• kms-key-policy-no-öffentlicher Zugang

• lambda-concurrency-check

• lambda-dlq-check

• lambda-function-public-access-verboten

• lambda-function-settings-check

• lambda-inside-vpc

• lambda-vpc-multi-az-überprüfen

• macie-auto-sensitive-data-Discovery-Check

• macie-status-check

• mfa-enabled-for-iam-Konsolenzugriff

• mq-active-deployment-mode

• mq-automatic-minor-version-Upgrade aktiviert

• mq-auto-minor-version-upgrade-fähig

• mq-cloudwatch-audit-logging-aktiviert

• mq-cloudwatch-audit-log-aktiviert

• mq-no-public-access

• mq-rabbit-deployment-mode

• msk-enhanced-monitoring-enabled

• msk-in-cluster-node-require-tls

• multi-region-cloud-trail-aktiviert

• nacl-no-unrestricted-ssh-rdp

• neptune-cluster-backup-retention-überprüfen

• neptune-cluster-cloudwatch-log-exportfähig

• neptune-cluster-copy-tags-to-snapshot-enabled

• neptune-cluster-deletion-protection-aktiviert

• neptune-cluster-encrypted

• neptune-cluster-iam-database-Authentifizierung

• neptune-cluster-multi-az-aktiviert

• neptune-cluster-snapshot-encrypted

• neptune-cluster-snapshot-public-verboten

• netfw-deletion-protection-enabled

• netfw-logging-enabled

• netfw-multi-az-enabled

• netfw-policy-default-action-fragment-Pakete

• netfw-policy-default-action-vollständige Pakete

• netfw-policy-rule-group-assoziiert

• netfw-stateless-rule-group-nicht leer

• nlb-internal-scheme-check

• no-unrestricted-route-to-igw

• opensearch-access-control-enabled

• opensearch-audit-logging-enabled

• opensearch-data-node-fault-Toleranz

• opensearch-encrypted-at-rest

• opensearch-https-required

• opensearch-in-vpc-only

• opensearch-logs-to-cloudwatch

• opensearch-node-to-node-Verschlüsselungsprüfung

• opensearch-primary-node-fault-Toleranz

• opensearch-update-check

• rabbit-mq-supported-version

• rds-aurora-mysql-audit-Protokollierung aktiviert

• rds-aurora-postgresql-logs-zu-Cloud-Watch

• rds-automatic-minor-version-upgrade-fähig

• rds-cluster-default-admin-überprüfen

• rds-cluster-deletion-protection-aktiviert

• rds-cluster-encrypted-at-ausruhen

• rds-cluster-iam-authentication-aktiviert

• rds-cluster-multi-az-aktiviert

• rds-db-security-group-nicht erlaubt

• rds-enhanced-monitoring-enabled

• rds-instance-default-admin-überprüfen

• rds-instance-deletion-protection-aktiviert

• rds-instance-iam-authentication-aktiviert

• rds-instance-public-access-überprüfen

• rds-in-backup-plan

• rds-last-backup-recovery-Punkt erstellt

• rds-logging-enabled

• rds-meets-restore-time-Ziel

• rds-multi-az-support

• rds-mysql-instance-encryptedim Transit

• rds-postgresql-logs-to- Cloudwatch

• rds-postgres-instance-encryptedim Transit

• rds-resources-protected-by-Ersatzplan

• rds-snapshots-public-prohibited

• rds-snapshot-encrypted

• rds-sql-server-logszur Cloud-Überwachung

• rds-storage-encrypted

• redshift-backup-enabled

• redshift-cluster-configuration-check

• redshift-cluster-kms-enabled

• redshift-cluster-maintenancesettings-check

• redshift-cluster-parameter-group-markiert

• redshift-cluster-public-access-überprüfen

• redshift-cluster-subnet-group-Multi-Az

• redshift-default-admin-check

• redshift-default-db-name-überprüfen

• redshift-enhanced-vpc-routing-aktiviert

• redshift-require-tls-ssl

• redshift-unrestricted-port-access

• required-tags

• restricted-incoming-traffic

• root-account-hardware-mfa-aktiviert

• root-account-mfa-enabled

• nur s3- access-point-in-vpc

• s3- -Blöcke access-point-public-access

• s3- -Blöcke account-level-public-access

• s3- -Blocke-periodisch account-level-public-access

• s 3- bucket-acl-prohibited

• s-3 bucket-blacklisted-actions-prohibited

• s3- bucket-cross-region-replication -aktiviert

• s-3 bucket-default-lock-enabled

• s3 bucket-level-public-access - verboten

• s3- bucket-logging-enabled

• s-3 bucket-mfa-delete-enabled

• s-3 bucket-policy-grantee-check

• s3- bucket-policy-not-more -freizügig

• s 3- bucket-public-read-prohibited

• s-3 bucket-public-write-prohibited

• s-3 bucket-replication-enabled

• s3- bucket-server-side-encryption -aktiviert

• s-3 bucket-ssl-requests-only

• s-3 bucket-versioning-enabled

• s-3 default-encryption-kms

• s-3 event-notifications-enabled

• s3 last-backup-recovery-point - erstellt

• s3- meets-restore-time-target

• s3- resources-in-logically-air -Tresor mit Lücken

• s3 resources-protected-by-backup - -Plan

• s 3- version-lifecycle-policy-check

• sagemaker-app-image-config-markiert

• sagemaker-domain-in-vpc

• sagemaker-endpoint-configuration-kms-schlüsselkonfiguriert

• sagemaker-endpoint-config-prod-Anzahl der Instanzen

• sagemaker-image-description

• sagemaker-image-tagged

• sagemaker-model-in-vpc

• sagemaker-model-isolation-enabled

• sagemaker-notebook-instance-inside-vpc

• sagemaker-notebook-instance-kms-key-konfiguriert

• sagemaker-notebook-instance-root-Zugriffsprüfung

• sagemaker-notebook-no-direct-Internetzugang

• secretsmanager-rotation-enabled-check

• secretsmanager-scheduled-rotation-success-überprüfen

• secretsmanager-secret-periodic-rotation

• secretsmanager-secret-unused

• secretsmanager-using-cmk

• securityhub-enabled

• security-account-information-provided

• service-catalog-shared-within-Organisation

• service-vpc-endpoint-enabled

• sns-encrypted-kms

• sns-topic-message-delivery-Benachrichtigung aktiviert

• sns-topic-no-public-Zugriff

• ssm-document-not-public

• ssm-document-tagged

• step-functions-state-machine-Protokollierung aktiviert

• storagegateway-last-backup-recovery-punkt-erstellt

• storagegateway-resources-in-logically-air-gapped-vault

• storagegateway-resources-protected-by-Ersatzplan

• subnet-auto-assign-public-ip-deaktiviert

• transfer-agreement-description

• transfer-agreement-tagged

• transfer-certificate-description

• transfer-certificate-tagged

• transfer-connector-tagged

• transfer-family-server-no-ftp

• transfer-profile-tagged

• transfer-workflow-description

• transfer-workflow-tagged

• virtualmachine-last-backup-recovery-punkt-erstellt

• virtualmachine-resources-in-logically-air-gapped-vault

• virtualmachine-resources-protected-by-Ersatzplan

• vpc-default-security-group-geschlossen

• vpc-endpoint-enabled

• vpc-flow-logs-enabled

• vpc-network-acl-unused-überprüfen

• vpc-peering-dns-resolution-überprüfen

• vpc-sg-open-only-to-authorized-ports

• vpc-sg-port-restriction-überprüfen

• vpc-vpn-2-tunnels-up

• wafv2-logging-enabled

• WAF 2- rulegroup-logging-enabled

• WAF 2- rulegroup-not-empty

• WAF 2- webacl-not-empty

• waf-regional-rulegroup-not-leer

• waf-regional-rule-not-leer

• waf-regional-webacl-not-leer

• access-keys-rotated

• account-part-of-organizations

• acmpca-certificate-authority-tagged

• acm-certificate-expiration-check

• acm-certificate-rsa-check

• acm-pca-root-ca-deaktiviert

• active-mq-supported-version

• alb-desync-mode-check

• alb-http-drop-invalid-Header-fähig

• alb-http-to-https-Umleitungsprüfung

• alb-internal-scheme-check

• alb-waf-enabled

• amplify-app-branch-auto-löschung aktiviert

• amplify-app-description

• amplify-app-tagged

• amplify-branch-performance-mode-aktiviert

• amplify-branch-tagged

• api-gwv2- access-logs-enabled

• api-gwv2- authorization-type-configured

• api-gw-associated-with-WAF

• api-gw-cache-enabled-und-verschlüsselt

• api-gw-endpoint-type-überprüfen

• api-gw-execution-logging-aktiviert

• api-gw-ssl-enabled

• api-gw-xray-enabled

• appconfig-application-description

• appconfig-application-tagged

• appconfig-configuration-profile-tagged

• appconfig-configuration-profile-validators-nicht leer

• appconfig-deployment-strategy-description

• appconfig-deployment-strategy-replicate-zu-ssm

• appconfig-environment-description

• appconfig-environment-tagged

• appconfig-extension-association-tagged

• appconfig-freeform-profile-config-Speicher

• appconfig-hosted-configuration-version-Beschreibung

• appflow-flow-tagged

• appintegrations-event-integration-description

• appintegrations-event-integration-tagged

• appmesh-gateway-route-tagged

• appmesh-mesh-deny-tcp-Weiterleitung

• appmesh-mesh-tagged

• appmesh-route-tagged

• appmesh-virtual-gateway-backend-Standards-tls

• appmesh-virtual-gateway-logging-file-path-exists

• appmesh-virtual-gateway-tagged

• appmesh-virtual-node-backend-defaults-tls-on

• appmesh-virtual-node-logging-file-path-exists

• appmesh-virtual-node-tagged

• appmesh-virtual-router-tagged

• appmesh-virtual-service-tagged

• approved-amis-by-id

• approved-amis-by-tag

• apprunner-service-in-vpc

• apprunner-service-no-public-Zugang

• apprunner-service-observability-enabled

• apprunner-service-tagged

• apprunner-vpc-connector-tagged

• appstream-fleet-in-vpc

• appsync-associated-with-waf

• appsync-authorization-check

• appsync-cache-encryption-at-ausruhen

• appsync-logging-enabled

• athena-data-catalog-description

• athena-prepared-statement-description

• athena-workgroup-description

• athena-workgroup-encrypted-at-ausruhen

• athena-workgroup-enforce-workgroup-Konfiguration

• athena-workgroup-engine-version-automatisches Upgrade

• athena-workgroup-logging-enabled

• aurora-last-backup-recovery-Punkt erstellt

• aurora-meets-restore-time-Ziel

• aurora-mysql-backtracking-enabled

• aurora-resources-in-logically-air-gapped-vault

• aurora-resources-protected-by-Ersatzplan

• autoscaling-capacity-rebalancing

• autoscaling-group-elb-healthcheck-erforderlich

• autoscaling-launchconfig-requires-imdsv2

• autoscaling-launch-config-hop-Grenze

• autoscaling-launch-config-public-ip-deaktiviert

• autoscaling-launch-template

• autoscaling-multiple-az

• autoscaling-multiple-instance-types

• aws-config-process-check

• backup-plan-min-frequency-and-min-retention-check

• backup-recovery-point-encrypted

• backup-recovery-point-manual-löschen-deaktiviert

• backup-recovery-point-minimum-Aufbewahrungsprüfung

• batch-compute-environment-enabled

• batch-compute-environment-managed

• batch-compute-environment-tagged

• batch-job-queue-enabled

• batch-job-queue-tagged

• batch-managed-compute-environment-using-launch-template

• batch-managed-compute-env-compute-resources-tagged

• batch-scheduling-policy-tagged

• beanstalk-enhanced-health-reporting-aktiviert

• beanstalk-logs-to-cloudwatch

• cassandra-keyspace-tagged

• clb-desync-mode-check

• clb-multiple-az

• cloudformation-stack-drift-detection-überprüfen

• cloudformation-stack-notification-check

• cloudtrail-all-read-s3- data-event-check

• cloudtrail-all-write-s3- data-event-check

• Wolkenspur-S3- bucket-access-logging

• cloudtrail-s3- bucket-public-access-prohibited

• cloudtrail-s3-dataevents-enabled

• cloudtrail-security-trail-enabled

• cloudwatch-alarm-action-check

• cloudwatch-alarm-action-enabled-überprüfen

• cloudwatch-alarm-resource-check

• cloudwatch-alarm-settings-check

• cloudwatch-log-group-encrypted

• cloud-trail-cloud-watch-logs-aktiviert

• cloud-trail-enabled

• cloud-trail-encryption-enabled

• cloud-trail-log-file-Validierung aktiviert

• cmk-backing-key-rotation-aktiviert

• codebuild-project-artifact-encryption

• codebuild-project-environment-privileged-überprüfen

• codebuild-project-envvar-awscred-überprüfen

• codebuild-project-logging-enabled

• codebuild-project-s3-log-verschlüsselt

• codebuild-project-source-repo-URL-Prüfung

• codebuild-report-group-encrypted-im Ruhezustand

• codedeploy-auto-rollback-monitor-aktiviert

• codedeploy-deployment-group-auto-rollback-aktiviert

• codedeploy-deployment-group-outdated-instanzen-aktualisieren

• Codedeploy-ec2- minimum-healthy-hosts-configured

• codedeploy-lambda-allatonce-traffic-shift-deaktiviert

• codeguruprofiler-profiling-group-tagged

• codegurureviewer-repository-association-tagged

• codepipeline-deployment-count-check

• codepipeline-region-fanout-check

• cognito-user-pool-advanced-sicherheitsaktiviert

• customerprofiles-object-type-allow-Profilerstellung

• customerprofiles-object-type-tagged

• custom-eventbus-policy-attached

• custom-schema-registry-policy-beigefügt

• cw-loggroup-retention-period-überprüfen

• datasync-task-data-verification-aktiviert

• datasync-task-logging-enabled

• datasync-task-tagged

• dax-encryption-enabled

• dax-tls-endpoint-encryption

• db-instance-backup-enabled

• desired-instance-tenancy

• desired-instance-type

• dms-auto-minor-version-aktualisieren-Prüfung

• dms-endpoint-ssl-configured

• dms-mongo-db-authentication-aktiviert

• dms-neptune-iam-authorization-aktiviert

• dms-redis-tls-enabled

• dms-replication-not-public

• dms-replication-task-sourcedb-Protokollierung

• dms-replication-task-targetdb-Protokollierung

• docdb-cluster-audit-logging-aktiviert

• docdb-cluster-backup-retention-überprüfen

• docdb-cluster-deletion-protection-aktiviert

• docdb-cluster-encrypted

• docdb-cluster-snapshot-public-verboten

• dynamodb-autoscaling-enabled

• dynamodb-in-backup-plan

• dynamodb-last-backup-recovery-Punkt erstellt

• dynamodb-meets-restore-time-Ziel

• dynamodb-pitr-enabled

• dynamodb-resources-protected-by-Ersatzplan

• dynamodb-table-deletion-protection-aktiviert

• dynamodb-table-encrypted-kms

• dynamodb-table-encryption-enabled

• dynamodb-throughput-limit-check

• ebs-in-backup-plan

• ebs-last-backup-recovery-punkt-erstellt

• ebs-meets-restore-time-Ziel

• ebs-optimized-instance

• ebs-resources-in-logically-air-gapped-vault

• ebs-resources-protected-by-Ersatzplan

• ebs-snapshot-public-restorable-überprüfen

• ec2- aktiviert client-vpn-connection-log

• ec2- -alle client-vpn-not-authorize

• ec2- ebs-encryption-by-default

• ec2-imdsv2-check

• ec2- instance-detailed-monitoring-enabled

• ec2- instance-managed-by-ssm

• ec2- instance-multiple-eni-check

• ec2- instance-no-public-ip

• ec2- instance-profile-attached

• ec2- erstellt last-backup-recovery-point

• ec2-2-prüfen launch-template-imdsv

• ec2- -deaktiviert launch-template-public-ip

• ec2- launch-template-tagged

• ec2- managedinstance-applications-blacklisted

• ec2- managedinstance-applications-required

• ec2- prüfen managedinstance-association-compliance-status

• ec2- managedinstance-inventory-blacklisted

• ec2- prüfen managedinstance-patch-compliance-status

• ec2- managedinstance-platform-check

• ec2- meets-restore-time-target

• ec2- no-amazon-key-pair

• ec2- paravirtual-instance-check

• ec2- prefix-list-tagged

• ec2- -Tresor mit Lücken resources-in-logically-air

• ec2- resources-protected-by-backup -plan

• ec2- -eni security-group-attached-to

• ec2- -eni-periodisch security-group-attached-to

• ec2-stopped-instance

• ec2- token-hop-limit-check

• ec2- traffic-mirror-filter-description

• ec2- traffic-mirror-filter-tagged

• ec2- traffic-mirror-session-description

• ec2- traffic-mirror-session-tagged

• ec2- traffic-mirror-target-description

• ec2- traffic-mirror-target-tagged

• ec2- -attach-deaktiviert transit-gateway-auto-vpc

• ec2- volume-inuse-check

• ec2- vpn-connection-logging-enabled

• ecr-private-image-scanning-aktiviert

• ecr-private-lifecycle-policy-konfiguriert

• ecr-private-tag-immutability-aktiviert

• ecr-repository-lifecycle-policy-konfiguriert

• ecs-awsvpc-networking-enabled

• ecs-containers-nonprivileged

• ecs-containers-readonly-access

• ecs-container-insights-enabled

• ecs-fargate-latest-platform-Version

• ecs-no-environment-secrets

• ecs-task-definition-log-Konfiguration

• ecs-task-definition-memory-hartes Limit

• ecs-task-definition-nonroot-Benutzer

• ecs-task-definition-pid-Modus-Check

• ecs-task-definition-user-for-host-mode-check

• efs-access-point-enforce-Stammverzeichnis

• efs-access-point-enforce-Benutzeridentität

• efs-automatic-backups-enabled

• efs-encrypted-check

• efs-filesystem-ct-encrypted

• efs-in-backup-plan

• efs-last-backup-recovery-Punkt erstellt

• efs-meets-restore-time-Ziel

• efs-mount-target-public-zugänglich

• efs-resources-in-logically-air-gapped-vault

• efs-resources-protected-by-Ersatzplan

• eip-attached

• eks-cluster-logging-enabled

• eks-cluster-log-enabled

• eks-cluster-oldest-supported-Ausführung

• eks-cluster-secrets-encrypted

• eks-cluster-supported-version

• eks-endpoint-no-public-Zugang

• eks-secrets-encrypted

• elasticache-auto-minor-version-aktualisieren-Prüfung

• elasticache-rbac-auth-enabled

• elasticache-redis-cluster-automatic-Backup-Check

• elasticache-repl-grp-auto-failover-fähig

• elasticache-repl-grp-encrypted-im Ruhezustand

• elasticache-repl-grp-encryptedunterwegs

• elasticache-repl-grp-redis-auth-aktiviert

• elasticache-subnet-group-check

• elasticache-supported-engine-version

• elasticbeanstalk-application-description

• elasticbeanstalk-application-version-description

• elasticbeanstalk-environment-description

• elasticsearch-encrypted-at-rest

• elasticsearch-in-vpc-only

• elasticsearch-logs-to-cloudwatch

• elasticsearch-node-to-node-Verschlüsselungsprüfung

• elasticsearch-update-check

• elastic-beanstalk-logs-to- Cloudwatch

• elastic-beanstalk-managed-updates-aktiviert

• elbv2- acm-certificate-required

• elbv2-multiple-az

• elb-acm-certificate-required

• elb-cross-zone-load-Balancing aktiviert

• elb-custom-security-policy-ssl-Überprüfung

• elb-deletion-protection-enabled

• elb-logging-enabled

• elb-predefined-security-policy-SSL-Überprüfung

• elb-tls-https-listeners-nur

• emr-block-public-access

• emr-kerberos-enabled

• emr-master-no-public-ip

• emr-security-configuration-encryption-ruh dich aus

• emr-security-configuration-encryption-Transit

• encrypted-volumes

• evidently-launch-description

• evidently-launch-tagged

• evidently-project-description

• evidently-project-tagged

• evidently-segment-description

• evidently-segment-tagged

• fis-experiment-template-log-Konfiguration vorhanden

• fis-experiment-template-tagged

• fms-network-firewall-resource-überprüfen

• fms-security-group-audit-Richtlinien-Check

• fms-shield-resource-policy-überprüfen

• fms-webacl-resource-policy-überprüfen

• fms-webacl-rulegroup-association-überprüfen

• frauddetector-entity-type-tagged

• frauddetector-label-tagged

• frauddetector-outcome-tagged

• frauddetector-variable-tagged

• fsx-last-backup-recovery-Punkt erstellt

• fsx-lustre-copy-tagszu Backups

• fsx-meets-restore-time-Ziel

• fsx-openzfs-copy-tags-aktiviert

• fsx-resources-protected-by-Backup-Plan

• fsx-windows-audit-log-konfiguriert

• global-endpoint-event-replication-aktiviert

• glue-job-logging-enabled

• glue-ml-transform-encrypted-im Ruhezustand

• guardduty-eks-protection-audit-aktiviert

• guardduty-eks-protection-runtime-aktiviert

• guardduty-enabled-centralized

• guardduty-lambda-protection-enabled

• guardduty-malware-protection-enabled

• guardduty-non-archived-findings

• guardduty-rds-protection-enabled

• GuardDuty-S3-Schutz aktiviert

• iam-customer-policy-blocked-kms-Aktionen

• iam-external-access-analyzer-aktiviert

• iam-group-has-users-überprüfen

• iam-inline-policy-blocked-kms-Aktionen

• iam-no-inline-policy-überprüfen

• iam-password-policy

• iam-policy-blacklisted-check

• iam-policy-in-use

• iam-policy-no-statements-with-admin-access

• iam-policy-no-statements-with-full-access

• iam-role-managed-policy-überprüfen

• iam-root-access-key-überprüfen

• iam-user-group-membership-überprüfen

• iam-user-mfa-enabled

• iam-user-no-policies-überprüfen

• iam-user-unused-credentials-überprüfen

• incoming-ssh-disabled

• inspector-ec2-Scan aktiviert

• inspector-ecr-scan-enabled

• inspector-lambda-code-scan-aktiviert

• inspector-lambda-standard-scan-aktiviert

• instances-in-vpc

• internet-gateway-authorized-vpc-nur

• iotevents-alarm-model-tagged

• iotevents-detector-model-tagged

• iotevents-input-tagged

• iotsitewise-asset-model-tagged

• iotsitewise-dashboard-tagged

• iotsitewise-gateway-tagged

• iotsitewise-portal-tagged

• iotsitewise-project-tagged

• iottwinmaker-entity-tagged

• iottwinmaker-scene-tagged

• iottwinmaker-sync-job-tagged

• iottwinmaker-workspace-tagged

• iotwireless-fuota-task-tagged

• iotwireless-multicast-group-tagged

• iotwireless-service-profile-tagged

• iot-authorizer-token-signing-aktiviert

• ivs-channel-playback-authorization-aktiviert

• ivs-channel-tagged

• ivs-playback-key-pair-markiert

• ivs-recording-configuration-tagged

• kinesis-firehose-delivery-stream-verschlüsselt

• kinesis-stream-backup-retention-überprüfen

• kinesis-stream-encrypted

• kms-cmk-not-scheduled-zum Löschen

• kms-key-policy-no-öffentlicher Zugang

• lambda-concurrency-check

• lambda-dlq-check

• lambda-function-public-access-verboten

• lambda-function-settings-check

• lambda-inside-vpc

• lambda-vpc-multi-az-überprüfen

• lightsail-disk-tagged

• macie-auto-sensitive-data-Discovery-Check

• macie-status-check

• mfa-enabled-for-iam-Konsolenzugriff

• mq-active-deployment-mode

• mq-automatic-minor-version-Upgrade aktiviert

• mq-auto-minor-version-upgrade-fähig

• mq-cloudwatch-audit-logging-aktiviert

• mq-cloudwatch-audit-log-aktiviert

• mq-no-public-access

• mq-rabbit-deployment-mode

• msk-enhanced-monitoring-enabled

• msk-in-cluster-node-require-tls

• multi-region-cloud-trail-aktiviert

• nacl-no-unrestricted-ssh-rdp

• neptune-cluster-backup-retention-überprüfen

• neptune-cluster-cloudwatch-log-exportfähig

• neptune-cluster-copy-tags-to-snapshot-enabled

• neptune-cluster-deletion-protection-aktiviert

• neptune-cluster-encrypted

• neptune-cluster-iam-database-Authentifizierung

• neptune-cluster-multi-az-aktiviert

• neptune-cluster-snapshot-encrypted

• neptune-cluster-snapshot-public-verboten

• netfw-deletion-protection-enabled

• netfw-logging-enabled

• netfw-multi-az-enabled

• netfw-policy-default-action-fragment-Pakete

• netfw-policy-default-action-vollständige Pakete

• netfw-policy-rule-group-assoziiert

• netfw-stateless-rule-group-nicht leer

• nlb-internal-scheme-check

• no-unrestricted-route-to-igw

• opensearch-access-control-enabled

• opensearch-audit-logging-enabled

• opensearch-data-node-fault-Toleranz

• opensearch-encrypted-at-rest

• opensearch-https-required

• opensearch-in-vpc-only

• opensearch-logs-to-cloudwatch

• opensearch-node-to-node-Verschlüsselungsprüfung

• opensearch-primary-node-fault-Toleranz

• opensearch-update-check

• rabbit-mq-supported-version

• rds-aurora-mysql-audit-Protokollierung aktiviert

• rds-aurora-postgresql-logs-zu-Cloud-Watch

• rds-automatic-minor-version-upgrade-fähig

• rds-cluster-auto-minor-version-upgrade-enable

• rds-cluster-default-admin-überprüfen

• rds-cluster-deletion-protection-aktiviert

• rds-cluster-encrypted-at-ausruhen

• rds-cluster-iam-authentication-aktiviert

• rds-cluster-multi-az-aktiviert

• rds-db-security-group-nicht erlaubt

• rds-enhanced-monitoring-enabled

• rds-instance-default-admin-überprüfen

• rds-instance-deletion-protection-aktiviert

• rds-instance-iam-authentication-aktiviert

• rds-instance-public-access-überprüfen

• rds-in-backup-plan

• rds-last-backup-recovery-Punkt erstellt

• rds-logging-enabled

• rds-meets-restore-time-Ziel

• rds-multi-az-support

• rds-mysql-instance-encryptedim Transit

• rds-postgresql-logs-to- Cloudwatch

• rds-postgres-instance-encryptedim Transit

• rds-resources-protected-by-Ersatzplan

• rds-snapshots-public-prohibited

• rds-snapshot-encrypted

• rds-sql-server-logszur Cloud-Überwachung

• rds-storage-encrypted

• redshift-backup-enabled

• redshift-cluster-configuration-check

• redshift-cluster-kms-enabled

• redshift-cluster-maintenancesettings-check

• redshift-cluster-parameter-group-markiert

• redshift-cluster-public-access-überprüfen

• redshift-cluster-subnet-group-Multi-Az

• redshift-default-admin-check

• redshift-default-db-name-überprüfen

• redshift-enhanced-vpc-routing-aktiviert

• redshift-require-tls-ssl

• redshift-unrestricted-port-access

• required-tags

• restricted-incoming-traffic

• root-account-hardware-mfa-aktiviert

• root-account-mfa-enabled

• nur s3- access-point-in-vpc

• s3- -Blöcke access-point-public-access

• s3- -Blöcke account-level-public-access

• s3- -Blocke-periodisch account-level-public-access

• s 3- bucket-acl-prohibited

• s-3 bucket-blacklisted-actions-prohibited

• s3- bucket-cross-region-replication -aktiviert

• s-3 bucket-default-lock-enabled

• s3 bucket-level-public-access - verboten

• s3- bucket-logging-enabled

• s-3 bucket-mfa-delete-enabled

• s-3 bucket-policy-grantee-check

• s3- bucket-policy-not-more -freizügig

• s 3- bucket-public-read-prohibited

• s-3 bucket-public-write-prohibited

• s-3 bucket-replication-enabled

• s3- bucket-server-side-encryption -aktiviert

• s-3 bucket-ssl-requests-only

• s-3 bucket-versioning-enabled

• s-3 default-encryption-kms

• s-3 event-notifications-enabled

• s3 last-backup-recovery-point - erstellt

• s3- meets-restore-time-target

• s3- resources-in-logically-air -Tresor mit Lücken

• s3 resources-protected-by-backup - -Plan

• s 3- version-lifecycle-policy-check

• sagemaker-app-image-config-markiert

• sagemaker-domain-in-vpc

• sagemaker-endpoint-configuration-kms-schlüsselkonfiguriert

• sagemaker-endpoint-config-prod-Anzahl der Instanzen

• sagemaker-image-description

• sagemaker-image-tagged

• sagemaker-model-in-vpc

• sagemaker-model-isolation-enabled

• sagemaker-notebook-instance-inside-vpc

• sagemaker-notebook-instance-kms-key-konfiguriert

• sagemaker-notebook-instance-root-Zugriffsprüfung

• sagemaker-notebook-no-direct-Internetzugang

• secretsmanager-rotation-enabled-check

• secretsmanager-scheduled-rotation-success-überprüfen

• secretsmanager-secret-periodic-rotation

• secretsmanager-secret-unused

• secretsmanager-using-cmk

• securityhub-enabled

• security-account-information-provided

• service-catalog-shared-within-Organisation

• service-vpc-endpoint-enabled

• ses-malware-scanning-enabled

• sns-encrypted-kms

• sns-topic-message-delivery-Benachrichtigung aktiviert

• sns-topic-no-public-Zugriff

• ssm-document-not-public

• ssm-document-tagged

• step-functions-state-machine-Protokollierung aktiviert

• storagegateway-last-backup-recovery-punkt-erstellt

• storagegateway-resources-in-logically-air-gapped-vault

• storagegateway-resources-protected-by-Ersatzplan

• subnet-auto-assign-public-ip-deaktiviert

• transfer-agreement-description

• transfer-agreement-tagged

• transfer-certificate-description

• transfer-certificate-tagged

• transfer-connector-tagged

• transfer-family-server-no-ftp

• transfer-profile-tagged

• transfer-workflow-description

• transfer-workflow-tagged

• virtualmachine-last-backup-recovery-punkt-erstellt

• virtualmachine-resources-in-logically-air-gapped-vault

• virtualmachine-resources-protected-by-Ersatzplan

• vpc-default-security-group-geschlossen

• vpc-endpoint-enabled

• vpc-flow-logs-enabled

• vpc-network-acl-unused-überprüfen

• vpc-peering-dns-resolution-überprüfen

• vpc-sg-open-only-to-authorized-ports

• vpc-sg-port-restriction-überprüfen

• vpc-vpn-2-tunnels-up

• wafv2-logging-enabled

• WAF 2- rulegroup-logging-enabled

• WAF 2- rulegroup-not-empty

• WAF 2- webacl-not-empty

• waf-regional-rulegroup-not-leer

• waf-regional-rule-not-leer

• waf-regional-webacl-not-leer

• workspaces-root-volume-encryption-aktiviert

• workspaces-user-volume-encryption-aktiviert

• access-keys-rotated

• account-part-of-organizations

• acmpca-certificate-authority-tagged

• acm-certificate-expiration-check

• acm-certificate-rsa-check

• acm-pca-root-ca-deaktiviert

• active-mq-supported-version

• alb-desync-mode-check

• alb-http-drop-invalid-Header-fähig

• alb-http-to-https-Umleitungsprüfung

• alb-internal-scheme-check

• alb-waf-enabled

• api-gwv2- access-logs-enabled

• api-gwv2- authorization-type-configured

• api-gw-associated-with-WAF

• api-gw-cache-enabled-und-verschlüsselt

• api-gw-endpoint-type-überprüfen

• api-gw-execution-logging-aktiviert

• api-gw-ssl-enabled

• api-gw-xray-enabled

• appconfig-application-description

• appconfig-application-tagged

• appconfig-configuration-profile-tagged

• appconfig-configuration-profile-validators-nicht leer

• appconfig-deployment-strategy-description

• appconfig-deployment-strategy-replicate-zu-ssm

• appconfig-environment-description

• appconfig-environment-tagged

• appconfig-extension-association-tagged

• appconfig-freeform-profile-config-Speicher

• appconfig-hosted-configuration-version-Beschreibung

• appflow-flow-tagged

• appintegrations-event-integration-description

• appintegrations-event-integration-tagged

• appmesh-gateway-route-tagged

• appmesh-mesh-deny-tcp-Weiterleitung

• appmesh-mesh-tagged

• appmesh-route-tagged

• appmesh-virtual-gateway-backend-Standards-tls

• appmesh-virtual-gateway-logging-file-path-exists

• appmesh-virtual-gateway-tagged

• appmesh-virtual-node-backend-defaults-tls-on

• appmesh-virtual-node-logging-file-path-exists

• appmesh-virtual-node-tagged

• appmesh-virtual-router-tagged

• appmesh-virtual-service-tagged

• approved-amis-by-id

• approved-amis-by-tag

• appsync-authorization-check

• appsync-logging-enabled

• athena-data-catalog-description

• athena-prepared-statement-description

• athena-workgroup-description

• athena-workgroup-encrypted-at-ausruhen

• athena-workgroup-enforce-workgroup-Konfiguration

• athena-workgroup-engine-version-automatisches Upgrade

• athena-workgroup-logging-enabled

• aurora-last-backup-recovery-Punkt erstellt

• aurora-meets-restore-time-Ziel

• aurora-resources-in-logically-air-gapped-vault

• aurora-resources-protected-by-Ersatzplan

• autoscaling-capacity-rebalancing

• autoscaling-group-elb-healthcheck-erforderlich

• autoscaling-launchconfig-requires-imdsv2

• autoscaling-launch-config-hop-Grenze

• autoscaling-launch-config-public-ip-deaktiviert

• autoscaling-launch-template

• autoscaling-multiple-az

• autoscaling-multiple-instance-types

• aws-config-process-check

• backup-plan-min-frequency-and-min-retention-check

• backup-recovery-point-encrypted

• backup-recovery-point-manual-löschen-deaktiviert

• backup-recovery-point-minimum-Aufbewahrungsprüfung

• batch-compute-environment-enabled

• batch-compute-environment-managed

• batch-compute-environment-tagged

• batch-job-queue-enabled

• batch-job-queue-tagged

• batch-managed-compute-environment-using-launch-template

• batch-managed-compute-env-compute-resources-tagged

• batch-scheduling-policy-tagged

• beanstalk-enhanced-health-reporting-aktiviert

• beanstalk-logs-to-cloudwatch

• clb-desync-mode-check

• clb-multiple-az

• cloudformation-stack-drift-detection-überprüfen

• cloudformation-stack-notification-check

• cloudtrail-all-read-s3- data-event-check

• cloudtrail-all-write-s3- data-event-check

• Wolkenspur-S3- bucket-access-logging

• CloudTrail-S3- bucket-public-access-prohibited

• cloudtrail-s3-dataevents-enabled

• cloudtrail-security-trail-enabled

• cloudwatch-alarm-action-check

• cloudwatch-alarm-action-enabled-überprüfen

• cloudwatch-alarm-resource-check

• cloudwatch-alarm-settings-check

• cloudwatch-log-group-encrypted

• cloud-trail-cloud-watch-logs-aktiviert

• cloud-trail-enabled

• cloud-trail-encryption-enabled

• cloud-trail-log-file-Validierung aktiviert

• cmk-backing-key-rotation-aktiviert

• codebuild-project-artifact-encryption

• codebuild-project-environment-privileged-überprüfen

• codebuild-project-envvar-awscred-überprüfen

• codebuild-project-logging-enabled

• codebuild-project-s3-log-verschlüsselt

• codebuild-project-source-repo-URL-Prüfung

• codebuild-report-group-encrypted-im Ruhezustand

• codedeploy-auto-rollback-monitor-aktiviert

• codedeploy-deployment-group-auto-rollback-aktiviert

• codedeploy-deployment-group-outdated-instanzen-aktualisieren

• Codedeploy-ec2- minimum-healthy-hosts-configured

• codedeploy-lambda-allatonce-traffic-shift-deaktiviert

• customerprofiles-object-type-allow-Profilerstellung

• customerprofiles-object-type-tagged

• custom-eventbus-policy-attached

• cw-loggroup-retention-period-überprüfen

• datasync-task-data-verification-aktiviert

• datasync-task-logging-enabled

• datasync-task-tagged

• db-instance-backup-enabled

• desired-instance-tenancy

• desired-instance-type

• dms-auto-minor-version-aktualisieren-Prüfung

• dms-endpoint-ssl-configured

• dms-mongo-db-authentication-aktiviert

• dms-redis-tls-enabled

• dms-replication-not-public

• dms-replication-task-sourcedb-Protokollierung

• dms-replication-task-targetdb-Protokollierung

• dynamodb-autoscaling-enabled

• dynamodb-in-backup-plan

• dynamodb-last-backup-recovery-Punkt erstellt

• dynamodb-meets-restore-time-Ziel

• dynamodb-pitr-enabled

• dynamodb-resources-protected-by-Ersatzplan

• dynamodb-table-deletion-protection-aktiviert

• dynamodb-table-encrypted-kms

• dynamodb-throughput-limit-check

• ebs-in-backup-plan

• ebs-last-backup-recovery-punkt-erstellt

• ebs-meets-restore-time-Ziel

• ebs-optimized-instance

• ebs-resources-in-logically-air-gapped-vault

• ebs-resources-protected-by-Ersatzplan

• ebs-snapshot-public-restorable-überprüfen

• ec2- aktiviert client-vpn-connection-log

• ec2- -alle client-vpn-not-authorize

• ec2- ebs-encryption-by-default

• ec2-imdsv2-check

• ec2- instance-detailed-monitoring-enabled

• ec2- instance-managed-by-ssm

• ec2- instance-multiple-eni-check

• ec2- instance-no-public-ip

• ec2- instance-profile-attached

• ec2- erstellt last-backup-recovery-point

• ec2-2-prüfen launch-template-imdsv

• ec2- -deaktiviert launch-template-public-ip

• ec2- launch-template-tagged

• ec2- managedinstance-applications-blacklisted

• ec2- managedinstance-applications-required

• ec2- managedinstance-inventory-blacklisted

• ec2- prüfen managedinstance-patch-compliance-status

• ec2- managedinstance-platform-check

• ec2- meets-restore-time-target

• ec2- no-amazon-key-pair

• ec2- prefix-list-tagged

• ec2- -Tresor mit Lücken resources-in-logically-air

• ec2- resources-protected-by-backup -plan

• ec2- -eni security-group-attached-to

• ec2- -eni-periodisch security-group-attached-to

• ec2- token-hop-limit-check

• ec2- traffic-mirror-filter-description

• ec2- traffic-mirror-filter-tagged

• ec2- -attach-deaktiviert transit-gateway-auto-vpc

• ec2- volume-inuse-check

• ec2- vpn-connection-logging-enabled

• ecr-private-image-scanning-aktiviert

• ecr-private-lifecycle-policy-konfiguriert

• ecr-private-tag-immutability-aktiviert

• ecr-repository-lifecycle-policy-konfiguriert

• ecs-awsvpc-networking-enabled

• ecs-containers-nonprivileged

• ecs-containers-readonly-access

• ecs-container-insights-enabled

• ecs-fargate-latest-platform-Version

• ecs-no-environment-secrets

• ecs-task-definition-log-Konfiguration

• ecs-task-definition-memory-hartes Limit

• ecs-task-definition-nonroot-Benutzer

• ecs-task-definition-pid-Modus-Check

• ecs-task-definition-user-for-host-mode-check

• efs-access-point-enforce-Stammverzeichnis

• efs-access-point-enforce-Benutzeridentität

• efs-automatic-backups-enabled

• efs-encrypted-check

• efs-filesystem-ct-encrypted

• efs-in-backup-plan

• efs-last-backup-recovery-Punkt erstellt

• efs-meets-restore-time-Ziel

• efs-mount-target-public-zugänglich

• efs-resources-in-logically-air-gapped-vault

• efs-resources-protected-by-Ersatzplan

• eip-attached

• eks-cluster-logging-enabled

• eks-cluster-log-enabled

• eks-cluster-oldest-supported-Ausführung

• eks-cluster-secrets-encrypted

• eks-cluster-supported-version

• eks-endpoint-no-public-Zugang

• eks-secrets-encrypted

• elasticache-auto-minor-version-aktualisieren-Prüfung

• elasticache-rbac-auth-enabled

• elasticache-redis-cluster-automatic-Backup-Check

• elasticache-repl-grp-auto-failover-fähig

• elasticache-repl-grp-encrypted-im Ruhezustand

• elasticache-repl-grp-encryptedunterwegs

• elasticache-repl-grp-redis-auth-aktiviert

• elasticache-subnet-group-check

• elasticache-supported-engine-version

• elasticbeanstalk-application-description

• elasticbeanstalk-application-version-description

• elasticbeanstalk-environment-description

• elasticsearch-encrypted-at-rest

• elasticsearch-in-vpc-only

• elasticsearch-logs-to-cloudwatch

• elasticsearch-node-to-node-Verschlüsselungsprüfung

• elastic-beanstalk-logs-to- Cloudwatch

• elastic-beanstalk-managed-updates-aktiviert

• elbv2- acm-certificate-required

• elbv2-multiple-az

• elb-cross-zone-load-Balancing aktiviert

• elb-custom-security-policy-ssl-Prüfung

• elb-deletion-protection-enabled

• elb-logging-enabled

• elb-predefined-security-policy-SSL-Überprüfung

• elb-tls-https-listeners-nur

• emr-block-public-access

• emr-kerberos-enabled

• emr-master-no-public-ip

• emr-security-configuration-encryption-ruh dich aus

• emr-security-configuration-encryption-Transit

• encrypted-volumes

• fis-experiment-template-log-Konfiguration vorhanden

• fis-experiment-template-tagged

• fms-network-firewall-resource-überprüfen

• fms-security-group-audit-Richtlinien-Check

• fms-shield-resource-policy-überprüfen

• fms-webacl-resource-policy-überprüfen

• fms-webacl-rulegroup-association-überprüfen

• fsx-last-backup-recovery-Punkt erstellt

• fsx-lustre-copy-tagszu Backups

• fsx-meets-restore-time-Ziel

• fsx-openzfs-copy-tags-aktiviert

• fsx-resources-protected-by-Backup-Plan

• fsx-windows-audit-log-konfiguriert

• glue-job-logging-enabled

• glue-ml-transform-encrypted-im Ruhezustand

• guardduty-eks-protection-audit-aktiviert

• guardduty-eks-protection-runtime-aktiviert

• guardduty-enabled-centralized

• guardduty-lambda-protection-enabled

• guardduty-malware-protection-enabled

• guardduty-non-archived-findings

• guardduty-rds-protection-enabled

• GuardDuty-S3-Schutz aktiviert

• iam-customer-policy-blocked-kms-Aktionen

• iam-external-access-analyzer-aktiviert

• iam-group-has-users-überprüfen

• iam-inline-policy-blocked-kms-Aktionen

• iam-no-inline-policy-überprüfen

• iam-password-policy

• iam-policy-blacklisted-check

• iam-policy-in-use

• iam-policy-no-statements-with-admin-access

• iam-policy-no-statements-with-full-access

• iam-role-managed-policy-überprüfen

• iam-root-access-key-überprüfen

• iam-user-group-membership-überprüfen

• iam-user-mfa-enabled

• iam-user-no-policies-überprüfen

• iam-user-unused-credentials-überprüfen

• incoming-ssh-disabled

• inspector-ec2-Scan aktiviert

• inspector-ecr-scan-enabled

• inspector-lambda-standard-scan-aktiviert

• instances-in-vpc

• internet-gateway-authorized-vpc-nur

• kinesis-firehose-delivery-stream-verschlüsselt

• kinesis-stream-backup-retention-überprüfen

• kinesis-stream-encrypted

• kms-cmk-not-scheduled-zum Löschen

• kms-key-policy-no-öffentlicher Zugang

• lambda-concurrency-check

• lambda-dlq-check

• lambda-function-public-access-verboten

• lambda-function-settings-check

• lambda-inside-vpc

• lambda-vpc-multi-az-überprüfen

• macie-auto-sensitive-data-Discovery-Check

• macie-status-check

• mfa-enabled-for-iam-Konsolenzugriff

• mq-active-deployment-mode

• mq-auto-minor-version-Upgrade aktiviert

• mq-cloudwatch-audit-log-aktiviert

• mq-rabbit-deployment-mode

• msk-enhanced-monitoring-enabled

• msk-in-cluster-node-require-tls

• multi-region-cloud-trail-aktiviert

• nacl-no-unrestricted-ssh-rdp

• neptune-cluster-backup-retention-überprüfen

• neptune-cluster-cloudwatch-log-exportfähig

• neptune-cluster-copy-tags-to-snapshot-enabled

• neptune-cluster-deletion-protection-aktiviert

• neptune-cluster-encrypted

• neptune-cluster-iam-database-Authentifizierung

• neptune-cluster-multi-az-aktiviert

• neptune-cluster-snapshot-encrypted

• neptune-cluster-snapshot-public-verboten

• netfw-deletion-protection-enabled

• netfw-logging-enabled

• netfw-multi-az-enabled

• netfw-policy-default-action-fragment-Pakete

• netfw-policy-default-action-vollständige Pakete

• netfw-policy-rule-group-assoziiert

• netfw-stateless-rule-group-nicht leer

• nlb-internal-scheme-check

• no-unrestricted-route-to-igw

• opensearch-access-control-enabled

• opensearch-audit-logging-enabled

• opensearch-data-node-fault-Toleranz

• opensearch-encrypted-at-rest

• opensearch-https-required

• opensearch-in-vpc-only

• opensearch-logs-to-cloudwatch

• opensearch-node-to-node-Verschlüsselungsprüfung

• opensearch-primary-node-fault-Toleranz

• opensearch-update-check

• rabbit-mq-supported-version

• rds-aurora-mysql-audit-Protokollierung aktiviert

• rds-aurora-postgresql-logs-zu-Cloud-Watch

• rds-automatic-minor-version-upgrade-fähig

• rds-cluster-auto-minor-version-upgrade-enable

• rds-cluster-default-admin-überprüfen

• rds-cluster-deletion-protection-aktiviert

• rds-cluster-encrypted-at-ausruhen

• rds-cluster-iam-authentication-aktiviert

• rds-cluster-multi-az-aktiviert

• rds-enhanced-monitoring-enabled

• rds-instance-default-admin-überprüfen

• rds-instance-deletion-protection-aktiviert

• rds-instance-iam-authentication-aktiviert

• rds-instance-public-access-überprüfen

• rds-in-backup-plan

• rds-last-backup-recovery-Punkt erstellt

• rds-logging-enabled

• rds-meets-restore-time-Ziel

• rds-multi-az-support

• rds-mysql-instance-encryptedim Transit

• rds-postgresql-logs-to- Cloudwatch

• rds-postgres-instance-encryptedunterwegs

• rds-resources-protected-by-Ersatzplan

• rds-snapshot-encrypted

• rds-sql-server-logszur Cloud-Überwachung

• rds-storage-encrypted

• redshift-backup-enabled

• redshift-cluster-configuration-check

• redshift-cluster-kms-enabled

• redshift-cluster-maintenancesettings-check

• redshift-cluster-parameter-group-markiert

• redshift-cluster-public-access-überprüfen

• redshift-cluster-subnet-group-Multi-Az

• redshift-default-admin-check

• redshift-default-db-name-überprüfen

• redshift-enhanced-vpc-routing-aktiviert

• redshift-require-tls-ssl

• redshift-unrestricted-port-access

• required-tags

• restricted-incoming-traffic

• root-account-hardware-mfa-aktiviert

• root-account-mfa-enabled

• nur s3- access-point-in-vpc

• s3- -Blöcke access-point-public-access

• s3- -Blöcke account-level-public-access

• s3- -Blocke-periodisch account-level-public-access

• s 3- bucket-acl-prohibited

• s-3 bucket-blacklisted-actions-prohibited

• s3- bucket-cross-region-replication -aktiviert

• s-3 bucket-default-lock-enabled

• s3 bucket-level-public-access - verboten

• s3- bucket-logging-enabled

• s-3 bucket-mfa-delete-enabled

• s-3 bucket-policy-grantee-check

• s3- bucket-policy-not-more -freizügig

• s 3- bucket-public-read-prohibited

• s-3 bucket-public-write-prohibited

• s-3 bucket-replication-enabled

• s3- bucket-server-side-encryption -aktiviert

• s-3 bucket-ssl-requests-only

• s-3 bucket-versioning-enabled

• s-3 default-encryption-kms

• s-3 event-notifications-enabled

• s3 last-backup-recovery-point - erstellt

• s3- meets-restore-time-target

• resources-protected-by-backups3-plan

• s 3- version-lifecycle-policy-check

• sagemaker-app-image-config-markiert

• sagemaker-domain-in-vpc

• sagemaker-endpoint-configuration-kms-schlüsselkonfiguriert

• sagemaker-endpoint-config-prod-Anzahl der Instanzen

• sagemaker-image-description

• sagemaker-image-tagged

• sagemaker-model-in-vpc

• sagemaker-model-isolation-enabled

• sagemaker-notebook-instance-inside-vpc

• sagemaker-notebook-instance-kms-key-konfiguriert

• sagemaker-notebook-instance-root-Zugriffsprüfung

• sagemaker-notebook-no-direct-Internetzugang

• secretsmanager-rotation-enabled-check

• secretsmanager-scheduled-rotation-success-überprüfen

• secretsmanager-secret-periodic-rotation

• secretsmanager-secret-unused

• secretsmanager-using-cmk

• securityhub-enabled

• security-account-information-provided

• service-catalog-shared-within-Organisation

• service-vpc-endpoint-enabled

• sns-encrypted-kms

• sns-topic-message-delivery-Benachrichtigung aktiviert

• sns-topic-no-public-Zugriff

• ssm-document-not-public

• ssm-document-tagged

• step-functions-state-machine-Protokollierung aktiviert

• storagegateway-last-backup-recovery-punkt-erstellt

• storagegateway-resources-in-logically-air-gapped-vault

• storagegateway-resources-protected-by-Ersatzplan

• subnet-auto-assign-public-ip-deaktiviert

• transfer-agreement-description

• transfer-agreement-tagged

• transfer-certificate-description

• transfer-certificate-tagged

• transfer-connector-tagged

• transfer-family-server-no-ftp

• transfer-profile-tagged

• transfer-workflow-description

• transfer-workflow-tagged

• virtualmachine-last-backup-recovery-punkt-erstellt

• virtualmachine-resources-in-logically-air-gapped-vault

• virtualmachine-resources-protected-by-Ersatzplan

• vpc-default-security-group-geschlossen

• vpc-endpoint-enabled

• vpc-flow-logs-enabled

• vpc-network-acl-unused-überprüfen

• vpc-peering-dns-resolution-überprüfen

• vpc-sg-open-only-to-authorized-ports

• vpc-sg-port-restriction-überprüfen

• vpc-vpn-2-tunnels-up

• wafv2-logging-enabled

• WAF 2- rulegroup-logging-enabled

• WAF 2- rulegroup-not-empty

• WAF 2- webacl-not-empty

• waf-regional-rulegroup-not-leer

• waf-regional-rule-not-leer

• waf-regional-webacl-not-leer

• workspaces-root-volume-encryption-aktiviert

• workspaces-user-volume-encryption-aktiviert

• access-keys-rotated

• account-part-of-organizations

• acmpca-certificate-authority-tagged

• acm-certificate-expiration-check

• acm-certificate-rsa-check

• acm-pca-root-ca-deaktiviert

• active-mq-supported-version

• alb-desync-mode-check

• alb-http-drop-invalid-Header-fähig

• alb-http-to-https-Umleitungsprüfung

• alb-internal-scheme-check

• alb-waf-enabled

• amplify-app-branch-auto-löschung aktiviert

• amplify-app-description

• amplify-app-tagged

• amplify-branch-performance-mode-aktiviert

• amplify-branch-tagged

• api-gwv2- access-logs-enabled

• api-gwv2- authorization-type-configured

• api-gw-associated-with-WAF

• api-gw-cache-enabled-und-verschlüsselt

• api-gw-endpoint-type-überprüfen

• api-gw-execution-logging-aktiviert

• api-gw-ssl-enabled

• api-gw-xray-enabled

• appconfig-application-description

• appconfig-application-tagged

• appconfig-configuration-profile-tagged

• appconfig-configuration-profile-validators-nicht leer

• appconfig-deployment-strategy-description

• appconfig-deployment-strategy-replicate-zu-ssm

• appconfig-environment-description

• appconfig-environment-tagged

• appconfig-extension-association-tagged

• appconfig-freeform-profile-config-Speicher

• appconfig-hosted-configuration-version-Beschreibung

• appmesh-gateway-route-tagged

• appmesh-mesh-deny-tcp-Weiterleitung

• appmesh-mesh-tagged

• appmesh-route-tagged

• appmesh-virtual-gateway-backend-Standards-tls

• appmesh-virtual-gateway-logging-file-path-exists

• appmesh-virtual-gateway-tagged

• appmesh-virtual-node-backend-defaults-tls-on

• appmesh-virtual-node-logging-file-path-exists

• appmesh-virtual-node-tagged

• appmesh-virtual-router-tagged

• appmesh-virtual-service-tagged

• approved-amis-by-id

• approved-amis-by-tag

• appsync-associated-with-waf

• appsync-authorization-check

• appsync-cache-encryption-at-ausruhen

• appsync-logging-enabled

• athena-data-catalog-description

• athena-prepared-statement-description

• athena-workgroup-description

• athena-workgroup-encrypted-at-ausruhen

• athena-workgroup-enforce-workgroup-Konfiguration

• athena-workgroup-engine-version-automatisches Upgrade

• athena-workgroup-logging-enabled

• aurora-last-backup-recovery-Punkt erstellt

• aurora-meets-restore-time-Ziel

• aurora-resources-in-logically-air-gapped-vault

• aurora-resources-protected-by-Ersatzplan

• autoscaling-capacity-rebalancing

• autoscaling-group-elb-healthcheck-erforderlich

• autoscaling-launchconfig-requires-imdsv2

• autoscaling-launch-config-hop-Grenze

• autoscaling-launch-config-public-ip-deaktiviert

• autoscaling-launch-template

• autoscaling-multiple-az

• autoscaling-multiple-instance-types

• aws-config-process-check

• backup-plan-min-frequency-and-min-retention-check

• backup-recovery-point-encrypted

• backup-recovery-point-manual-löschen-deaktiviert

• backup-recovery-point-minimum-Aufbewahrungsprüfung

• batch-compute-environment-enabled

• batch-compute-environment-managed

• batch-compute-environment-tagged

• batch-job-queue-enabled

• batch-job-queue-tagged

• batch-managed-compute-environment-using-launch-template

• batch-managed-compute-env-compute-resources-tagged

• batch-scheduling-policy-tagged

• beanstalk-enhanced-health-reporting-aktiviert

• beanstalk-logs-to-cloudwatch

• cassandra-keyspace-tagged

• clb-desync-mode-check

• clb-multiple-az

• cloudformation-stack-drift-detection-überprüfen

• cloudformation-stack-notification-check

• cloudtrail-all-read-s3- data-event-check

• cloudtrail-all-write-s3- data-event-check

• Wolkenspur-S3- bucket-access-logging

• CloudTrail-S3- bucket-public-access-prohibited

• cloudtrail-s3-dataevents-enabled

• cloudtrail-security-trail-enabled

• cloudwatch-alarm-action-check

• cloudwatch-alarm-action-enabled-überprüfen

• cloudwatch-alarm-resource-check

• cloudwatch-alarm-settings-check

• cloudwatch-log-group-encrypted

• cloud-trail-cloud-watch-logs-aktiviert

• cloud-trail-enabled

• cloud-trail-encryption-enabled

• cloud-trail-log-file-Validierung aktiviert

• cmk-backing-key-rotation-aktiviert

• codebuild-project-artifact-encryption

• codebuild-project-environment-privileged-überprüfen

• codebuild-project-envvar-awscred-überprüfen

• codebuild-project-logging-enabled

• codebuild-project-s3-log-verschlüsselt

• codebuild-project-source-repo-URL-Prüfung

• codebuild-report-group-encrypted-im Ruhezustand

• codedeploy-auto-rollback-monitor-aktiviert

• codedeploy-deployment-group-auto-rollback-aktiviert

• codedeploy-deployment-group-outdated-instanzen-aktualisieren

• Codedeploy-ec2- minimum-healthy-hosts-configured

• codedeploy-lambda-allatonce-traffic-shift-deaktiviert

• codepipeline-deployment-count-check

• custom-eventbus-policy-attached

• custom-schema-registry-policy-angehängt

• cw-loggroup-retention-period-überprüfen

• datasync-task-data-verification-aktiviert

• datasync-task-logging-enabled

• datasync-task-tagged

• db-instance-backup-enabled

• desired-instance-tenancy

• desired-instance-type

• dms-auto-minor-version-aktualisieren-Prüfung

• dms-endpoint-ssl-configured

• dms-mongo-db-authentication-aktiviert

• dms-neptune-iam-authorization-aktiviert

• dms-redis-tls-enabled

• dms-replication-not-public

• dms-replication-task-sourcedb-Protokollierung

• dms-replication-task-targetdb-Protokollierung

• docdb-cluster-audit-logging-aktiviert

• docdb-cluster-backup-retention-überprüfen

• docdb-cluster-deletion-protection-aktiviert

• docdb-cluster-encrypted

• docdb-cluster-snapshot-public-verboten

• dynamodb-autoscaling-enabled

• dynamodb-in-backup-plan

• dynamodb-last-backup-recovery-Punkt erstellt

• dynamodb-meets-restore-time-Ziel

• dynamodb-pitr-enabled

• dynamodb-resources-protected-by-Ersatzplan

• dynamodb-table-deletion-protection-aktiviert

• dynamodb-table-encrypted-kms

• dynamodb-throughput-limit-check

• ebs-in-backup-plan

• ebs-last-backup-recovery-punkt-erstellt

• ebs-meets-restore-time-Ziel

• ebs-optimized-instance

• ebs-resources-in-logically-air-gapped-vault

• ebs-resources-protected-by-Ersatzplan

• ebs-snapshot-public-restorable-überprüfen

• ec2- aktiviert client-vpn-connection-log

• ec2- -alle client-vpn-not-authorize

• ec2- ebs-encryption-by-default

• ec2-imdsv2-check

• ec2- instance-detailed-monitoring-enabled

• ec2- instance-managed-by-ssm

• ec2- instance-multiple-eni-check

• ec2- instance-no-public-ip

• ec2- instance-profile-attached

• ec2- erstellt last-backup-recovery-point

• ec2-2-prüfen launch-template-imdsv

• ec2- -deaktiviert launch-template-public-ip

• ec2- launch-template-tagged

• ec2- managedinstance-applications-blacklisted

• ec2- managedinstance-applications-required

• ec2- prüfen managedinstance-association-compliance-status

• ec2- managedinstance-inventory-blacklisted

• ec2- prüfen managedinstance-patch-compliance-status

• ec2- managedinstance-platform-check

• ec2- meets-restore-time-target

• ec2- no-amazon-key-pair

• ec2- prefix-list-tagged

• ec2- -Tresor mit Lücken resources-in-logically-air

• ec2- resources-protected-by-backup -plan

• ec2- -eni security-group-attached-to

• ec2- -eni-periodisch security-group-attached-to

• ec2-stopped-instance

• ec2- token-hop-limit-check

• ec2- traffic-mirror-filter-description

• ec2- traffic-mirror-filter-tagged

• ec2- traffic-mirror-session-description

• ec2- traffic-mirror-session-tagged

• ec2- traffic-mirror-target-description

• ec2- traffic-mirror-target-tagged

• ec2- -attach-deaktiviert transit-gateway-auto-vpc

• ec2- volume-inuse-check

• ec2- vpn-connection-logging-enabled

• ecr-private-image-scanning-aktiviert

• ecr-private-lifecycle-policy-konfiguriert

• ecr-private-tag-immutability-aktiviert

• ecr-repository-lifecycle-policy-konfiguriert

• ecs-awsvpc-networking-enabled

• ecs-containers-nonprivileged

• ecs-containers-readonly-access

• ecs-container-insights-enabled

• ecs-fargate-latest-platform-Version

• ecs-no-environment-secrets

• ecs-task-definition-log-Konfiguration

• ecs-task-definition-memory-hartes Limit

• ecs-task-definition-nonroot-Benutzer

• ecs-task-definition-pid-Modus-Check

• ecs-task-definition-user-for-host-mode-check

• efs-access-point-enforce-Stammverzeichnis

• efs-access-point-enforce-Benutzeridentität

• efs-automatic-backups-enabled

• efs-encrypted-check

• efs-filesystem-ct-encrypted

• efs-in-backup-plan

• efs-last-backup-recovery-Punkt erstellt

• efs-meets-restore-time-Ziel

• efs-mount-target-public-zugänglich

• efs-resources-in-logically-air-gapped-vault

• efs-resources-protected-by-Ersatzplan

• eip-attached

• eks-cluster-logging-enabled

• eks-cluster-log-enabled

• eks-cluster-oldest-supported-Ausführung

• eks-cluster-secrets-encrypted

• eks-cluster-supported-version

• eks-endpoint-no-public-Zugang

• eks-secrets-encrypted

• elasticache-auto-minor-version-aktualisieren-Prüfung

• elasticache-rbac-auth-enabled

• elasticache-redis-cluster-automatic-Backup-Check

• elasticache-repl-grp-auto-failover-fähig

• elasticache-repl-grp-encrypted-im Ruhezustand

• elasticache-repl-grp-encryptedunterwegs

• elasticache-repl-grp-redis-auth-aktiviert

• elasticache-subnet-group-check

• elasticache-supported-engine-version

• elasticbeanstalk-application-description

• elasticbeanstalk-application-version-description

• elasticbeanstalk-environment-description

• elasticsearch-encrypted-at-rest

• elasticsearch-in-vpc-only

• elasticsearch-logs-to-cloudwatch

• elasticsearch-node-to-node-Verschlüsselungsprüfung

• elasticsearch-update-check

• elastic-beanstalk-logs-to- Cloudwatch

• elastic-beanstalk-managed-updates-aktiviert

• elbv2- acm-certificate-required

• elbv2-multiple-az

• elb-acm-certificate-required

• elb-cross-zone-load-Balancing aktiviert

• elb-custom-security-policy-ssl-Prüfung

• elb-deletion-protection-enabled

• elb-logging-enabled

• elb-predefined-security-policy-SSL-Überprüfung

• elb-tls-https-listeners-nur

• emr-block-public-access

• emr-kerberos-enabled

• emr-master-no-public-ip

• emr-security-configuration-encryption-ruh dich aus

• emr-security-configuration-encryption-Transit

• encrypted-volumes

• fis-experiment-template-log-Konfiguration vorhanden

• fis-experiment-template-tagged

• fms-network-firewall-resource-überprüfen

• fms-security-group-audit-Richtlinien-Check

• fms-shield-resource-policy-überprüfen

• fms-webacl-resource-policy-überprüfen

• fms-webacl-rulegroup-association-überprüfen

• fsx-last-backup-recovery-Punkt erstellt

• fsx-lustre-copy-tagszu Backups

• fsx-meets-restore-time-Ziel

• fsx-openzfs-copy-tags-aktiviert

• fsx-resources-protected-by-Backup-Plan

• fsx-windows-audit-log-konfiguriert

• glue-job-logging-enabled

• glue-ml-transform-encrypted-im Ruhezustand

• guardduty-eks-protection-audit-aktiviert

• guardduty-eks-protection-runtime-aktiviert

• guardduty-enabled-centralized

• guardduty-lambda-protection-enabled

• guardduty-malware-protection-enabled

• guardduty-non-archived-findings

• guardduty-rds-protection-enabled

• GuardDuty-S3-Schutz aktiviert

• iam-customer-policy-blocked-kms-Aktionen

• iam-external-access-analyzer-aktiviert

• iam-group-has-users-überprüfen

• iam-inline-policy-blocked-kms-Aktionen

• iam-no-inline-policy-überprüfen

• iam-password-policy

• iam-policy-blacklisted-check

• iam-policy-in-use

• iam-policy-no-statements-with-admin-access

• iam-policy-no-statements-with-full-access

• iam-role-managed-policy-überprüfen

• iam-root-access-key-überprüfen

• iam-user-group-membership-überprüfen

• iam-user-mfa-enabled

• iam-user-no-policies-überprüfen

• iam-user-unused-credentials-überprüfen

• incoming-ssh-disabled

• inspector-ec2-Scan aktiviert

• inspector-ecr-scan-enabled

• inspector-lambda-standard-scan-aktiviert

• instances-in-vpc

• internet-gateway-authorized-vpc-nur

• iot-authorizer-token-signing-aktiviert

• kinesis-firehose-delivery-stream-verschlüsselt

• kinesis-stream-backup-retention-überprüfen

• kinesis-stream-encrypted

• kms-cmk-not-scheduled-zum Löschen

• kms-key-policy-no-öffentlicher Zugang

• lambda-concurrency-check

• lambda-dlq-check

• lambda-function-public-access-verboten

• lambda-function-settings-check

• lambda-inside-vpc

• lambda-vpc-multi-az-überprüfen

• macie-auto-sensitive-data-Discovery-Check

• macie-status-check

• mfa-enabled-for-iam-Konsolenzugriff

• mq-active-deployment-mode

• mq-automatic-minor-version-Upgrade aktiviert

• mq-auto-minor-version-upgrade-fähig

• mq-cloudwatch-audit-logging-aktiviert

• mq-cloudwatch-audit-log-aktiviert

• mq-no-public-access

• mq-rabbit-deployment-mode

• msk-enhanced-monitoring-enabled

• msk-in-cluster-node-require-tls

• multi-region-cloud-trail-aktiviert

• nacl-no-unrestricted-ssh-rdp

• neptune-cluster-backup-retention-überprüfen

• neptune-cluster-cloudwatch-log-exportfähig

• neptune-cluster-copy-tags-to-snapshot-enabled

• neptune-cluster-deletion-protection-aktiviert

• neptune-cluster-encrypted

• neptune-cluster-iam-database-Authentifizierung

• neptune-cluster-multi-az-aktiviert

• neptune-cluster-snapshot-encrypted

• neptune-cluster-snapshot-public-verboten

• netfw-deletion-protection-enabled

• netfw-logging-enabled

• netfw-multi-az-enabled

• netfw-policy-default-action-fragment-Pakete

• netfw-policy-default-action-vollständige Pakete

• netfw-policy-rule-group-assoziiert

• netfw-stateless-rule-group-nicht leer

• nlb-internal-scheme-check

• no-unrestricted-route-to-igw

• opensearch-access-control-enabled

• opensearch-audit-logging-enabled

• opensearch-data-node-fault-Toleranz

• opensearch-encrypted-at-rest

• opensearch-https-required

• opensearch-in-vpc-only

• opensearch-logs-to-cloudwatch

• opensearch-node-to-node-Verschlüsselungsprüfung

• opensearch-primary-node-fault-Toleranz

• opensearch-update-check

• rabbit-mq-supported-version

• rds-aurora-mysql-audit-Protokollierung aktiviert

• rds-aurora-postgresql-logs-zu-Cloud-Watch

• rds-automatic-minor-version-upgrade-fähig

• rds-cluster-auto-minor-version-upgrade-enable

• rds-cluster-default-admin-überprüfen

• rds-cluster-deletion-protection-aktiviert

• rds-cluster-encrypted-at-ausruhen

• rds-cluster-iam-authentication-aktiviert

• rds-cluster-multi-az-aktiviert

• rds-enhanced-monitoring-enabled

• rds-instance-default-admin-überprüfen

• rds-instance-deletion-protection-aktiviert

• rds-instance-iam-authentication-aktiviert

• rds-instance-public-access-überprüfen

• rds-in-backup-plan

• rds-last-backup-recovery-Punkt erstellt

• rds-logging-enabled

• rds-meets-restore-time-Ziel

• rds-multi-az-support

• rds-mysql-instance-encryptedim Transit

• rds-postgresql-logs-to- Cloudwatch

• rds-postgres-instance-encryptedunterwegs

• rds-resources-protected-by-Ersatzplan

• rds-snapshots-public-prohibited

• rds-snapshot-encrypted

• rds-sql-server-logszur Cloud-Überwachung

• rds-storage-encrypted

• redshift-backup-enabled

• redshift-cluster-configuration-check

• redshift-cluster-kms-enabled

• redshift-cluster-maintenancesettings-check

• redshift-cluster-parameter-group-markiert

• redshift-cluster-public-access-überprüfen

• redshift-cluster-subnet-group-Multi-Az

• redshift-default-admin-check

• redshift-default-db-name-überprüfen

• redshift-enhanced-vpc-routing-aktiviert

• redshift-require-tls-ssl

• redshift-unrestricted-port-access

• required-tags

• restricted-incoming-traffic

• root-account-hardware-mfa-aktiviert

• root-account-mfa-enabled

• nur s3- access-point-in-vpc

• s3- -Blöcke access-point-public-access

• s3- -Blöcke account-level-public-access

• s3- -Blocke-periodisch account-level-public-access

• s 3- bucket-acl-prohibited

• s-3 bucket-blacklisted-actions-prohibited

• s3- bucket-cross-region-replication -aktiviert

• s-3 bucket-default-lock-enabled

• s3 bucket-level-public-access - verboten

• s3- bucket-logging-enabled

• s-3 bucket-mfa-delete-enabled

• s-3 bucket-policy-grantee-check

• s3- bucket-policy-not-more -freizügig

• s 3- bucket-public-read-prohibited

• s-3 bucket-public-write-prohibited

• s-3 bucket-replication-enabled

• s3- bucket-server-side-encryption -aktiviert

• s-3 bucket-ssl-requests-only

• s-3 bucket-versioning-enabled

• s-3 default-encryption-kms

• s-3 event-notifications-enabled

• s3 last-backup-recovery-point - erstellt

• s3- meets-restore-time-target

• resources-protected-by-backups3-plan

• s 3- version-lifecycle-policy-check

• sagemaker-app-image-config-markiert

• sagemaker-domain-in-vpc

• sagemaker-endpoint-configuration-kms-schlüsselkonfiguriert

• sagemaker-endpoint-config-prod-Anzahl der Instanzen

• sagemaker-image-description

• sagemaker-image-tagged

• sagemaker-model-in-vpc

• sagemaker-model-isolation-enabled

• sagemaker-notebook-instance-inside-vpc

• sagemaker-notebook-instance-kms-key-konfiguriert

• sagemaker-notebook-instance-root-Zugriffsprüfung

• sagemaker-notebook-no-direct-Internetzugang

• secretsmanager-rotation-enabled-check

• secretsmanager-scheduled-rotation-success-überprüfen

• secretsmanager-secret-periodic-rotation

• secretsmanager-secret-unused

• secretsmanager-using-cmk

• securityhub-enabled

• security-account-information-provided

• service-catalog-shared-within-Organisation

• service-vpc-endpoint-enabled

• sns-encrypted-kms

• sns-topic-message-delivery-Benachrichtigung aktiviert

• sns-topic-no-public-Zugriff

• ssm-document-not-public

• ssm-document-tagged

• step-functions-state-machine-Protokollierung aktiviert

• storagegateway-last-backup-recovery-punkt-erstellt

• storagegateway-resources-in-logically-air-gapped-vault

• storagegateway-resources-protected-by-Ersatzplan

• subnet-auto-assign-public-ip-deaktiviert

• transfer-agreement-description

• transfer-agreement-tagged

• transfer-certificate-description

• transfer-certificate-tagged

• transfer-connector-tagged

• transfer-family-server-no-ftp

• transfer-profile-tagged

• transfer-workflow-description

• transfer-workflow-tagged

• virtualmachine-last-backup-recovery-punkt-erstellt

• virtualmachine-resources-in-logically-air-gapped-vault

• virtualmachine-resources-protected-by-Ersatzplan

• vpc-default-security-group-geschlossen

• vpc-endpoint-enabled

• vpc-flow-logs-enabled

• vpc-network-acl-unused-überprüfen

• vpc-peering-dns-resolution-überprüfen

• vpc-sg-open-only-to-authorized-ports

• vpc-sg-port-restriction-überprüfen

• vpc-vpn-2-tunnels-up

• wafv2-logging-enabled

• WAF 2- rulegroup-logging-enabled

• WAF 2- rulegroup-not-empty

• WAF 2- webacl-not-empty

• waf-regional-rulegroup-not-leer

• waf-regional-rule-not-leer

• waf-regional-webacl-not-leer