Elenco di AWS Config Regole gestite per regione e disponibilità

• access-keys-rotated

• account-part-of-organizations

• acmpca-certificate-authority-tagged

• acm-certificate-expiration-check

• acm-certificate-rsa-check

• acm-certificate-transparent-logging-abilitata

• acm-pca-root-ca-disabled

• versione supportata da active-mq-

• alb-desync-mode-check

• alb-http-drop-invalid-header-enabled

• alb-http-to-https-redirection-check

• alb-internal-scheme-check

• etichettato con alb-listener

• etichettato con alb-tag

• alb-waf-enabled

• amplify-app-branch-abilitato alla cancellazione automatica

• amplify-app-build-spec-configurato

• descrizione dell'app amplifica

• amplify-app-no-variabili di ambiente

• amplify-app-platform-check

• etichettato con amplify-app

• abilitato per amplify-branch-auto-build

• amplify-branch-build-spec-configurato

• amplify-branch-descrizione

• amplify-branch-framework configurato

• abilitato per la modalità amplify-branch-performance

• abilitato per amplify-branch-pull-request-preview-

• etichettato con amplify-branch

• apigatewayv2-integration-private-https-abilitato

• apigatewayv2-stage-descrizione

• nome-dominio-apigateway-tls-check

• apigateway-stage-access-logs-abilitato

• descrizione di apigateway-stage-

• api-gwv2-access-logs-enabled

• api-gwv2-authorization-type-configured

• api-gwv2-stage-default-route-detailed-metrics-abilitato

• api-gw-associated-with-waf

• api-gw-cache-enabled-and-encrypted

• api-gw-endpoint-type-check

• api-gw-execution-logging-enabled

• api-gw-rest-api-contrassegnato

• api-gw-ssl-enabled

• etichettato con api-gw-stage-

• api-gw-xray-enabled

• descrizione dell'applicazione appconfigg

• appconfig-application-tagged

• appconfig-configuration-profile-taggato

• appconfig-configuration-profile-validators-non-empty

• descrizione della strategia di distribuzione di appconfig-deployment

• appconfig-deployment-strategy-time-final-bake-time

• appconfig-deployment-strategy-replicate-to-ssm

• etichettato con appconfig-deployment-strategy-

• descrizione dell'ambiente di appconfig

• etichettato con appconfig-environment

• appconfig-extension-association-tagged

• appconfig-freeform-profile-config-storage

• descrizione della versione di appconfig-hosted-configuration-

• taggato con appflow-flow

• appflow-flow-trigger-type-check

• appmesh-gateway-route-taggato

• appmesh-mesh-deny-tcp-forwarding

• appmesh-mesh-ip-pref-check

• taggato con appmesh-mesh

• appmesh-route-taggato

• appmesh-virtual-gateway-backend-defaults-tls

• appmesh-virtual-gateway-listeners-health-check-abilitato

• appmesh-virtual-gateway-logging-file-path-exists

• taggato con appmesh-virtual-gateway-

• appmesh-virtual-node-backend-defaults-tls-on

• appmesh-virtual-node-cloud-map-ip-pref-check

• appmesh-virtual-node-dns-ip-pref-check

• appmesh-virtual-node-listeners-health-check-abilitato

• appmesh-virtual-node-listeners-outlier-detect-abilitato

• appmesh-virtual-node-logging-file-path-exists

• appmesh-virtual-node-service-backends-tls-enforced

• taggato con appmesh-virtual-node

• taggato con appmesh-virtual-router

• appmesh-virtual-service-taggato

• approved-amis-by-id

• approved-amis-by-tag

• servizio-apprunner-in-vpc

• applunner-service-ip-address-type-check

• apprunner-service-max-unhealthy-threshold

• apprunner-service-no-public access

• apprunner-service-ability-enabled

• apprunner-service-taggato

• apprunner-vpc-connector-taggato

• flotta-appstream-in-vpc

• appsync-associated-with-waf

• appsync-authorization-check

• appsync-cache-encryption-at-rest

• abilitato per appsync-graphql-api-xray

• appsync-logging-enabled

• etichettato con aps-rule-groups-namespace

• descrizione del catalogo dei dati di athena

• descrizione della dichiarazione preparata da athena

• descrizione del gruppo di lavoro athena

• athena-workgroup-encrypted-at-rest

• athena-workgroup-enforce-workgroup-configuration

• athena-workgroup-engine-version-auto-upgrade

• athena-workgroup-logging-abilitato

• auditmanager-assessment-taggato

• aurora-global-database-encryption-at-rest

• aurora-last-backup-recovery-point-created

• aurora-meets-restore-time-target

• aurora-mysql-backtracking-enabled

• aurora-mysql-cluster-audit-logging

• aurora-risorse-in-logicamente-air-gapped-vault

• aurora-resources-protected-by-backup-plan

• autoscaling-capacity-rebalancing

• autoscaling-group-elb-healthcheck-required

• autoscaling-launchconfig-requires-imdsv2

• autoscaling-launch-config-hop-limit

• autoscaling-launch-config-public-ip-disabled

• autoscaling-launch-template

• autoscaling-multiple-az

• autoscaling-multiple-instance-types

• backup-plan-min-frequency-and-min-retention-check

• backup-recovery-point-encrypted

• backup-recovery-point-manual-deletion-disabled

• backup-recovery-point-minimum-retention-check

• abilitato per l'ambiente di elaborazione in batch

• ambiente di elaborazione in batch gestito

• etichettato in ambiente di calcolo in batch

• abilitato alla coda di lavoro in modalità batch-job-

• taggato batch-job-queue-

• ambiente di calcolo gestito in batch utilizzando un modello di avvio

• controllo della strategia di allocazione dell'ambiente di calcolo gestito in batch

• batch-managed-compute-env-compute-resources-taggato

• spot-compute-environment-max-bid gestito in batch

• etichettato con politica di pianificazione dei lotti

• beanstalk-enhanced-health-reporting-enabled

• bedrockagentcore-codeinterpreter-networkmode-check

• bedrockagentcore-gateway-authorizer-abilitato

• bedrockagentcore-runtime-private-network-required

• bedrock-agentcore-memory-encryption-enabled

• abilitato alla crittografia dell'origine dei dati bedrock

• taggato con cassandra-keyspace

• clb-desync-mode-check

• clb-multiple-az

• cloudformation-stack-drift-detection-check

• cloudformation-stack-notification-check

• cloudformation-stack-service-role-check

• cloudformation-termination-protection-check

• cloudtrail-all-read-s3-data-event-check

• cloudtrail-all-write-s3-data-event-check

• cloudtrail-event-data-store-multi-regione

• registrazione degli accessi a cloudtrail-s3-bucket-

• cloudtrail-s3-bucket-accesso pubblico vietato

• cloudtrail-s3-dataevents-enabled

• cloudtrail-security-trail-enabled

• cloudwatch-alarm-action-check

• cloudwatch-alarm-action-enabled-check

• descrizione di cloudwatch-alarm-

• cloudwatch-alarm-resource-check

• cloudwatch-alarm-settings-check

• cloudwatch-log-group-encrypted

• taggato con cloudwatch-metric-stream

• cloud-trail-cloud-watch-logs-enabled

• cloud-trail-enabled

• cloud-trail-encryption-enabled

• cloud-trail-log-file-validation-enabled

• cmk-backing-key-rotation-enabled

• codiceartifact-repository-taggato

• codebuild-project-artifact-encryption

• codebuild-project-environment-privileged-check

• codebuild-project-envvar-awscred-check

• codebuild-project-logging-enabled

• codebuild-project-s3-logs-encrypted

• codebuild-project-source-repo-url-check

• codificato con codebuild-project

• codebuild-report-group-crittografato a riposo

• etichettato con codebuild-report-group-

• codedeploy-auto-rollback-monitor-enabled

• codedeploy-deployment-group-abilitato per il rollback automatico

• codedeploy-deployment-group-outdated-instances-update

• codedeploy-ec2-minimum-healthy-hosts-configured

• codedeploy-lambda-allatonce-traffic-shift-disabled

• codeguruprofiler-profiling-group-taggato

• codegurureviewer-repository-association-tagged

• codepipeline-deployment-count-check

• codepipeline-region-fanout-check

• cognito-identity-pool-accessi non autenticati

• cognito-identity-pool-unauth-access-check

• cognito-userpool-cust-auth-threat-fullcheck

• abilitata alla sicurezza avanzata con cognito-user-pool-

• abilitata la protezione da eliminazione del pool di utenti cognito

• abilitato per cognito-user-pool-mfa

• cognito-user-pool-password-policy-check

• taggato con cognito-user-pool-

• custom-eventbus-policy-attached

• custom-schema-registry-policy-attached

• cw-loggroup-retention-period-check

• datasync-location-object-storage-usando-https

• datasync-task-data-verifica-abilitata

• datasync-task-logging-abilitato

• etichettato con datasync-task-

• dax-encryption-enabled

• crittografia dax-tls-endpoint

• db-instance-backup-enabled

• desired-instance-tenancy

• desired-instance-type

• dms-auto-minor-version-upgrade-check

• dms-endpoint-ssl-configured

• etichettato dms-endpoint

• dms-mongo-db-autenticazione abilitata

• dms-neptune-iam-autorizzazione-abilitata

• dms-redis-tls-abilitato

• istanza di replica dms-multiaz abilitata

• dms-replication-not-public

• dms-replication-task-sourcedb-logging

• contrassegnato con dms-replication-task-

• dms-replication-task-targetdb-logging

• docdb-cluster-audit-logging-enabled

• docdb-cluster-backup-retention-check

• docdb-cluster-deletion-protection-enabled

• docdb-cluster-encrypted

• docdb-cluster-crittografato in transito

• docdb-cluster-snapshot-public-prohibited

• dynamodb-autoscaling-enabled

• dynamodb-in-backup-plan

• dynamodb-last-backup-recovery-point-created

• dynamodb-meets-restore-time-target

• dynamodb-pitr-enabled

• dynamodb-resources-protected-by-backup-plan

• dynamodb-table-deletion-protection-enabled

• dynamodb-table-encrypted-kms

• dynamodb-table-encryption-enabled

• dynamodb-throughput-limit-check

• ebs-in-backup-plan

• ebs-last-backup-recovery-point-created

• ebs-meets-restore-time-target

• ebs-optimized-instance

• ebs-resources-in-logicamente-air-gapped-vault

• ebs-resources-protected-by-backup-plan

• ebs-snapshot-block-accesso pubblico

• ebs-snapshot-public-restorable-check

• contrassegnato con ec2-capacity-reservation-

• etichettato con ec2-carrier-gateway-

• ec2-client-vpn-connection-log-enabled

• contrassegnato con ec2-client-vpn-endpoint

• ec2-client-vpn-not-authorize-all

• ec2-dhcp-options-taggato

• ec2-ebs-encryption-by-default

• ec2-enis-source-destination-check-abilitato

• contrassegnato con ec2-fleet

• ec2-imdsv2-check

• ec2-instance-detailed-monitoring-enabled

• istanza ec2-lanciata-con-ami-consentito-

• ec2-instance-managed-by-ssm

• ec2-instance-multiple-eni-check

• ec2-instance-no-public-ip

• ec2-instance-profile-attached

• contrassegnato con ec2-ipamscope

• ec2-last-backup-recovery-point-created

• ec2-launchtemplate-ebs-encrypted

• ec2-launch-templates-ebs-volume-crittografato

• ec2-launch-template-imdsv2-check

• ec2-launch-template-public-ip-disabled

• ec2-launch-template-taggato

• ec2-managedinstance-applications-blacklisted

• ec2-managedinstance-applications-required

• ec2-managedinstance-association-compliance-status-check

• ec2-managedinstance-inventory-blacklisted

• ec2-managedinstance-patch-compliance-status-check

• ec2-managedinstance-platform-check

• ec2-meets-restore-time-target

• ec2-network-insights-access-scope-analysis-taggato

• contrassegnato con ec2-network-insights-access-scope-taggato

• ec2-network-insights-analysis-taggato

• contrassegnato con ec2-network-insights-path-

• ec2-no-amazon-key-pair

• ec2-prefix-list-taggato

• ec2-resources-in-logicamente-air-gapped-vault

• ec2-resources-protected-by-backup-plan

• ec2-security-group-attached-to-eni

• ec2-security-group-attached-to-eni-periodic

• ec2-spot-fleet-request-ct-encryption-at-rest

• ec2-stopped-instance

• ec2-token-hop-limit-check

• descrizione del filtro ec2-traffic-mirror-

• ec2-traffic-mirror-filter-taggato

• descrizione della sessione ec2-traffic-mirror-

• ec2-traffic-mirror-session-taggato

• descrizione di ec2-traffic-mirror-target-

• contrassegnato con ec2-traffic-mirror-target-

• ec2-transit-gateway-auto-vpc-attach-disabled

• ec2-transit-gateway-multicast-domain-taggato

• ec2-volume-inuse-check

• connessione ec2-vpn-ike-version-check

• ec2-vpn-connection-logging abilitato

• ec2-vpn-connection-taggato

• ecr-private-image-scanning-enabled

• ecr-private-lifecycle-policy-configured

• ecr-private-tag-immutability-enabled

• ecr-repository-cmk-encryption-enabled

• contrassegnato con ecr-repository-

• ecs-awsvpc-networking-enabled

• etichettato con ecs-capacity-provider-

• ecs-capacity-provider-termination-check

• ecs-containers-nonprivileged

• ecs-containers-readonly-access

• ecs-container-insights-enabled

• ecs-fargate-latest-platform-version

• ecs-no-environment-secrets

• ecs-service-propagate-tags-abilitato

• ecs-task-definition-efs-encryption-abilitato

• ecs-task-definition-linux-user-non-root

• ecs-task-definition-log-configuration

• ecs-task-definition-memory-hard-limit

• ecs-task-definition-network-mode-not-host

• ecs-task-definition-nonroot-user

• ecs-task-definition-pid-mode-check

• ecs-task-definition-user-for-host-mode-check

• ecs-task-definition-windows-user-non-admin

• efs-access-point-enforce-root-directory

• efs-access-point-enforce-user-identity

• efs-automatic-backups-abilitato

• efs-encrypted-check

• efs-filesystem-ct-crittografato

• etichettato con efs-file-system

• efs-in-backup-plan

• efs-last-backup-recovery-point-created

• efs-meets-restore-time-target

• efs-mount-target-accessibile al pubblico

• efs-resources-in-logicamente-air-gapped-vault

• efs-resources-protected-by-backup-plan

• eip-attached

• taggato con eks-addon

• eks-cluster-logging-enabled

• eks-cluster-log-enabled

• eks-cluster-oldest-supported-version

• eks-cluster-secrets-crittografato

• eks-cluster-supported-version

• eks-endpoint-no-public-access

• eks-fargate-profile-taggato

• controllo della versione supportata da eks-nodegroup-

• eks-secrets-encrypted

• abilitato per elasticache-automatic-backup-check

• elasticache-auto-minor-version-upgrade-check

• elasticache-rbac-auth-enabled

• elasticache-redis-cluster-automatic-backup-check

• elasticache-repl-grp-auto-failover-enabled

• elasticache-repl-grp-encrypted-at-rest

• elasticache-repl-grp-encrypted-in-transit

• elasticache-repl-grp-redis-auth-enabled

• elasticache-subnet-group-check

• elasticache-supported-engine-version

• elasticbeanstalk-descrizione dell'applicazione

• elasticbeanstalk-application-version-description

• elasticbeanstalk-environment-descrizione

• elasticsearch-encrypted-at-rest

• elasticsearch-in-vpc-only

• elasticsearch-logs-to-cloudwatch

• elasticsearch-node-to-node-encryption-check

• elastic-beanstalk-logs-to-cloudwatch

• elastic-beanstalk-managed-updates-enabled

• elbv2-acm-certificate-required

• elbv2-listener-encryption-in-transit

• elbv2-multiple-az

• elbv2-predefined-security-policy-ssl-check

• elbv2-targetgroup-healthcheck-protocol-encrypted

• elbv2-targetgroup-protocol-crittografato

• elb-acm-certificate-required

• elb-cross-zone-load-balancing-enabled

• elb-custom-security-policy-ssl-check

• elb-deletion-protection-enabled

• elb-internal-scheme-check

• elb-logging-enabled

• elb-predefined-security-policy-ssl-check

• etichettato con elb

• elb-tls-https-listeners-only

• emr-block-public-access

• emr-kerberos-enabled

• emr-master-no-public-ip

• emr-security-configuration-encryption-rest

• emr-security-configuration-encryption-transit

• encrypted-volumes

• eventschemas-discoverer-taggato

• eventschemas-registry-taggato

• event-data-store-cmk-encryption-enabled

• evidentemente la descrizione del lancio

• evidentemente taggato dal lancio

• evidentemente descrizione del progetto

• evidentemente etichettato come progetto

• evidentemente descrizione del segmento

• evidentemente etichettata per segmenti

• fis-experiment-template-log-configuration-exists

• taggato con fis-experiment-template-

• fms-shield-resource-policy-check

• fms-webacl-resource-policy-check

• fms-webacl-rulegroup-association-check

• frauddetector-entity-type-tagged

• frauddetector-label-tagged

• frauddetector-outcome-taggato

• frauddetector-variable-tagged

• fsx-last-backup-recovery-point-created

• fsx-lustre-copy-tags-to-backups

• fsx-meets-restore-time-target

• fsx-ontap-deployment-type-check

• fsx-openzfs-copy-tags-enabled

• fsx-openzfs-deployment-type-check

• fsx-resources-protected-by-backup-plan

• fsx-windows-audit-log-configured

• fsx-windows-deployment-type-check

• taggato con glb-listener

• etichettato con glb

• global-endpoint-event-replication-enabled

• glue-job-logging abilitato

• glue-ml-transform-criptato a riposo

• etichettato con glue-ml-transform-

• versione supportata da glue-spark-job

• groundstation-config-taggato

• groundstation-dataflowendpointgroup-taggato

• groundstation-mission profil-taggato

• guardduty-ec2-protezione-abilitato per il runtime

• guardduty-ecs-protection-runtime-abilitato

• abilitata per guardduty-eks-protezione-audit-

• guardduty-eks-protezione-abilitato per il runtime

• guardduty-enabled-centralized

• abilitato alla protezione guardduty-lambda

• protezione da malware abilitata per guardduty

• guardduty-non-archived-findings

• protezione guardduty-rds abilitata

• abilitato per il monitoraggio del tempo di esecuzione di guardduty

• protezione abilitata per guardduty-s3

• etichettato con healthlake-fhirdatastore

• iam-customer-policy-blocked-kms-actions

• abilitato per iam-external-access-analyzer

• iam-group-has-users-check

• iam-inline-policy-blocked-kms-actions

• iam-no-inline-policy-check

• iam-password-policy

• iam-policy-blacklisted-check

• descrizione della politica di iam-

• iam-policy-in-use

• iam-policy-no-statements-with-admin-access

• iam-policy-no-statements-with-full-access

• iam-role-managed-policy-check

• iam-root-access-key-check

• iam-user-group-membership-check

• iam-user-mfa-enabled

• iam-user-no-policies-check

• iam-user-unused-credentials-check

• imagebuilder-distributionconfiguration-taggato

• taggato con imagebuilder-imagepipeline

• imagebuilder-imagerecipe-ebs-volumes-crittografato

• taggato con imagebuilder-imagerecipe-

• imagebuilder-infrastructureconfiguration-taggato

• incoming-ssh-disabled

• abilitato per inspector-ec2-scan

• abilitato per inspector-ecr-scan

• abilitato per la scansione del codice lambda con inspector-lambda

• abilitato per inspector-lambda-standard-scan

• instances-in-vpc

• internet-gateway-authorized-vpc-only

• iotdevicedefender-custom-metric-taggato

• iotevents-alarm-model-taggato

• etichettato con iotevents-detector-model

• iotevents-input-taggato

• taggato con iotsitewise-asset-model

• taggato con iotsitewise-dashboard

• taggato con iotsitewise-gateway

• taggato con iotsitewise-portal

• taggato con iotsitewise-project

• iot-authorizer-token-signing-abilitato

• template-taggato con iot-job-

• descrizione del modello di provisioning iot

• iot-provisioning-template-jitp

• template con tag iot-provisioning-

• contrassegnato con iot-scheduled-audit-

• taggato con kendra-index-

• taggato nel canale di segnalazione video kinesis

• taggato con kinesisvideo-stream

• kinesis-firehose-delivery-stream crittografato

• kinesis-stream-backup-retention-check

• kinesis-stream-encrypted

• kinesis-video-stream-minima-conservazione dei dati

• kms-cmk-not-scheduled-for-deletion

• kms-key-policy-no-public-access

• kms-key-taggato

• lambda-concurrency-check

• lambda-dlq-check

• funzione lambda-application-log-level-check

• descrizione della funzione lambda

• funzione-lambda-log-format-json

• lambda-function-public-access-prohibited

• lambda-function-settings-check

• funzione lambda-system-log-level-check

• funzione lambda-abilitata per xray

• lambda-inside-vpc

• lambda-vpc-multi-az-check

• lightsail-bucket-allow-public-overrides-disabilitato

• lightsail-bucket-object-versioning-abilitato

• etichettato con lightsail-bucket

• etichettato con certificato lightsailer

• etichettato con lightsail-disk

• macie-auto-sensitive-data-discovery-check

• macie-status-check

• mariadb-publish-logs-to-cloudwatch-logs

• pacchetto multimediale con tag di configurazione del pacchetto

• mediatailor-playbackconfiguration-taggato

• taggato con memorydb-subnetgroup

• mfa-enabled-for-iam-console-access

• autenticazione mq-active-broker-ldap

• mq-active-deployment-mode

• mq-active-single-instance-broker-storage-type-efs

• mq-automatic-minor-version-upgrade-enabled

• mq-auto-minor-version-upgrade-enabled

• mq-broker-general-logging abilitato

• mq-cloudwatch-audit-logging-enabled

• abilitato per mq-cloudwatch-audit-log

• mq-no-public-access

• mq-rabbit-deployment-mode

• msk-cluster-public-access-disabilitato

• contrassegnato con msk-cluster-

• msk-connect-connector-logging-abilitato

• msk-enhanced-monitoring-enabled

• msk-in-cluster-node-require-tls

• msk-unrestricted-access-check

• multi-region-cloud-trail-enabled

• nacl-no-unrestricted-ssh-rdp

• neptune-cluster-backup-retention-check

• neptune-cluster-cloudwatch-log-export-enabled

• neptune-cluster-copy-tags-to-snapshot-enabled

• neptune-cluster-deletion-protection-enabled

• neptune-cluster-encrypted

• neptune-cluster-iam-database-authentication

• neptune-cluster-multi-az-enabled

• neptune-cluster-snapshot-encrypted

• neptune-cluster-snapshot-iam-database-auth-abilitato

• neptune-cluster-snapshot-public-prohibited

• netfw-deletion-protection-enabled

• netfw-logging-enabled

• netfw-multi-az-enabled

• netfw-policy-default-action-fragment-packets

• netfw-policy-default-action-full-packets

• netfw-policy-rule-group-associated

• netfw-stateless-rule-group-not-empty

• abilitato alla protezione netfw-subnet-change-

• nlb-cross-zone-load-balancing-enabled

• nlb-internal-scheme-check

• etichettato con nlb-listener

• nlb-logging abilitato

• etichettato nlb

• no-unrestricted-route-to-igw

• opensearchserverless-collection-description

• opensearchserverless-collection-standbyreplicas-enabled

• opensearch-access-control-enabled

• opensearch-audit-logging-enabled

• opensearch-data-node-fault-tolerance

• opensearch-encrypted-at-rest

• opensearch-https-required

• opensearch-in-vpc-only

• opensearch-logs-to-cloudwatch

• opensearch-node-to-node-encryption-check

• opensearch-primary-node-fault-tolerance

• opensearch-update-check

• versione-supportata da rabbit-mq

• rds-aurora-mysql-audit-logging-enabled

• rds-aurora-postgresql-logs-to-cloudwatch

• rds-automatic-minor-version-upgrade-enabled

• rds-cluster-auto-minor-version-upgrade-enable

• rds-cluster-backup-retention-check

• rds-cluster-default-admin-check

• rds-cluster-deletion-protection-enabled

• rds-cluster-encrypted-at-rest

• rds-cluster-iam-authentication-enabled

• rds-cluster-multi-az-enabled

• rds-enhanced-monitoring-enabled

• rds-event-subscription-taggato

• versione-supportata da rds-global-cluster-aurora-mysql

• rds-instance-default-admin-check

• rds-instance-deletion-protection-enabled

• rds-instance-iam-authentication-enabled

• rds-instance-public-access-check

• rds-instance-subnet-igw-check

• rds-in-backup-plan

• rds-last-backup-recovery-point-created

• rds-logging-enabled

• rds-mariadb-instance-crittografata-in-transito

• rds-meets-restore-time-target

• rds-multi-az-support

• rds-mysql-cluster-copy-tags-to-snapshot-check

• rds-mysql-instance-crittografata-in-transito

• rds-option-group-taggato

• rds-pgsql-cluster-copy-tags-to-snapshot-check

• rds-postgresql-logs-to-cloudwatch

• istanza rds-postgres-crittografata in transito

• crittografia rds-proxy-tls

• rds-resources-protected-by-backup-plan

• rds-snapshots-public-prohibited

• rds-snapshot-encrypted

• rds-sqlserver-crittografato in transito

• rds-sql-server-logs-to-cloudwatch

• rds-storage-encrypted

• redshift-audit-logging-enabled

• redshift-backup-enabled

• redshift-cluster-configuration-check

• redshift-cluster-kms-enabled

• redshift-cluster-maintenancesettings-check

• abilitato per redshift-cluster-multi-az

• redshift-cluster-parameter-group-taggato

• redshift-cluster-public-access-check

• redshift-cluster-subnet-group-multi-az

• redshift-default-admin-check

• redshift-default-db-name-check

• redshift-enhanced-vpc-routing-enabled

• redshift-require-tls-ssl

• redshift-serverless-default-admin-check

• redshift-serverless-default-db-name-check

• crittografia redshift-serverless-namespace-cmk-

• redshift-serverless-publish-logs-to-cloudwatch

• redshift-serverless-workgroup-crittografato in transito

• redshift-serverless-workgroup-no-accesso pubblico

• redshift-serverless-workgroup-routes-within-vpc

• accesso illimitato alla porta redshift

• required-tags

• etichettato con resiliencehub-app

• resiliencehub-resiliencypolicy-taggato

• restricted-incoming-traffic

• root-account-hardware-mfa-enabled

• root-account-mfa-enabled

• route53-resolver-firewall-domain-list-taggato

• taggato con route53-resolver-firewall-rule-group-association-

• taggato con route53-resolver-firewall-rule-group-

• etichettato con route53-resolver-resolver-endpoint

• etichettato con route53-resolver-resolver-rule-

• rum-app-monitor-cloudwatch-logs-abilitato

• taggato con rum-app-monitor-

• s3express-dir-bucket-lifecycle-rules-check

• s3-access-point-in-vpc-only

• s3-access-point-public-access-blocks

• s3-account-level-public-access-blocks

• s3-account-level-public-access-blocks-periodic

• s3-bucket-acl-prohibited

• s3-bucket-blacklisted-actions-prohibited

• s3-bucket abilitato per la replica tra regioni

• s3-bucket-default-lock-enabled

• s3-bucket-level-public-access-prohibited

• s3-bucket-logging-enabled

• s3-bucket-mfa-delete-enabled

• s3-bucket-policy-grantee-check

• s3-bucket-policy-not-more-permissive

• s3-bucket-public-read-prohibited

• s3-bucket-public-write-prohibited

• s3-bucket-replication-enabled

• s3-bucket-server-side-encryption-enabled

• s3-bucket-ssl-requests-only

• etichettato con s3-bucket

• s3-bucket-versioning-enabled

• s3-default-encryption-kms

• s3-directory-bucket-lifecycle-policy-rule-check

• s3-event-notifications-enabled

• s3-last-backup-recovery-point-created

• s3-lifecycle-policy-check

• s3-meets-restore-time-target

• risorse s3-in-logicamente-air-gapped-vault

• s3-resources-protected-by-backup-plan

• s3-version-lifecycle-policy-check

• taggato con sagemaker-app-image-config-

• sagemaker-data-quality-job-encrypt-in-transit

• sagemaker-data-quality-job-isolation

• dominio-sagemaker-in-vpc

• taggato con dominio sagemaker

• sagemaker-endpoint-configuration-kms-key-configured

• sagemaker-endpoint-config-kms-key-required

• sagemaker-endpoint-config-prod-instance-count

• sagemaker-featuregroup-description

• sagemaker-featuregroup-encryption-at-rest

• crittografia sagemaker-featuregroup-online-store-

• taggato con sagemaker-feature-group

• descrizione dell'immagine con sagemaker

• taggato con sagemaker

• taggato con sagemaker inferenceexperiment-

• sagemaker-inf-experiment-data-storage-kms-crittografato

• sagemaker-inf-experiment-instance-storage-kms-crittografato

• sagemaker-model-bias-job-encrypt-in-transit

• sagemaker-model-bias-job-isolation

• sagemaker-model-explainability-job-encrypt-in-transit

• sagemaker-model-explainability-job-network-isolation

• modello-sagemaker-in-vpc

• abilitato all'isolamento del modello sagemaker

• registro privato sagemaker-model-multicontainer-

• sagemaker-model-private-registry-obbligatorio

• sagemaker-model-quality-job-definition-isolation

• sagemaker-model-quality-job-encrypt-in-transit

• sagemaker-monitoring-schedule-isolation

• sagemaker-monitoring-schedule-traffic-encryption

• sagemaker-notebook-instance-inside-vpc

• sagemaker-notebook-instance-kms-key-configured

• versione-della-platform-sagemaker-notebook-instance-

• sagemaker-notebook-instance-root-access-check

• sagemaker-notebook-instance-storage-vol-kms-crittografata

• sagemaker-notebook-no-direct-internet-access

• secretsmanager-rotation-enabled-check

• secretsmanager-scheduled-rotation-success-check

• secretsmanager-secret-periodic-rotation

• secretsmanager-secret-unused

• secretsmanager-using-cmk

• securityhub-enabled

• security-account-information-provided

• service-catalog-portfolio-taggato

• catalogo-di-servizi-condiviso all'interno dell'organizzazione

• service-vpc-endpoint-enabled

• ses-sending-tls-required

• signer-signingprofile - taggato

• sns-encrypted-kms

• sns-topic-message-delivery-notification-enabled

• sns-topic-nessun accesso pubblico

• sqs-queue-dlq-check

• sqs-queue-senza accesso pubblico

• sqs-queue-policy-controllo di accesso completo

• ssm-automation-block-public-sharing

• ssm-automation-logging abilitato

• ssm-document-not-public

• con tag ssm-document

• stepfunctions-state-machine-taggato

• step-functions-state-machine-logging-enabled

• storagegateway-last-backup-recovery-point-created

• risorse-di-storagegateway-in-logicamente-air-gapped-vault

• storagegateway-resources-protected-by-backup-plan

• subnet-auto-assign-public-ip-disabled

• descrizione del contratto di trasferimento

• contratto di trasferimento etichettato

• descrizione del certificato di trasferimento

• certificato di trasferimento etichettato

• transfer-connector-as2-encryption-algorithm-check

• transfer-connector-as2-mdn-signing-algorithm-check

• transfer-connector-as2-signing-algorithm-check

• transfer-connector-logging-abilitato

• transfer-connector-taggato

• transfer-family-server-no-ftp

• transfer-profile-taggato

• descrizione del flusso di lavoro di trasferimento

• transfer-workflow-taggato

• virtualmachine-last-backup-recovery-point-created

• risorse della macchina virtuale in un vault logicamente airgapped

• virtualmachine-resources-protected-by-backup-plan

• vpc-default-security-group-closed

• abilitato per vpc-endpoint

• vpc-flow-logs-enabled

• vpc-network-acl-unused-check

• vpc-peering-dns-resolution-check

• vpc-sg-open-only-to-authorized-ports

• vpc-sg-port-restriction-check

• vpc-vpn-2-tunnels-up

• wafv2-logging-enabled

• wafv2-rulegroup-logging-enabled

• wafv2-rulegroup-not-empty

• wafv2-webacl-not-empty

• waf-regional-rulegroup-not-empty

• waf-regional-rule-not-empty

• waf-regional-webacl-not-empty

• access-keys-rotated

• account-part-of-organizations

• con tag acmpca-certificate-authority-

• acm-certificate-expiration-check

• acm-certificate-rsa-check

• acm-certificate-transparent-logging-abilitata

• acm-pca-root-ca-disabled

• versione supportata da active-mq-

• alb-desync-mode-check

• alb-http-drop-invalid-header-enabled

• alb-http-to-https-redirection-check

• alb-internal-scheme-check

• etichettato con alb-listener

• etichettato con alb-tag

• alb-waf-enabled

• amplify-app-branch-abilitato alla cancellazione automatica

• amplify-app-build-spec-configurato

• descrizione dell'app amplifica

• amplify-app-no-variabili di ambiente

• amplify-app-platform-check

• etichettato con amplify-app

• abilitato per amplify-branch-auto-build

• amplify-branch-build-spec-configurato

• amplify-branch-descrizione

• amplify-branch-framework configurato

• abilitato per la modalità amplify-branch-performance

• abilitato per amplify-branch-pull-request-preview-

• etichettato con amplify-branch

• apigatewayv2-integration-private-https-abilitato

• apigatewayv2-stage-descrizione

• nome-dominio-apigateway-tls-check

• apigateway-stage-access-logs-abilitato

• descrizione di apigateway-stage-

• api-gwv2-access-logs-enabled

• api-gwv2-authorization-type-configured

• api-gwv2-stage-default-route-detailed-metrics-abilitato

• api-gw-associated-with-waf

• api-gw-cache-enabled-and-encrypted

• api-gw-endpoint-type-check

• api-gw-execution-logging-enabled

• api-gw-rest-api-contrassegnato

• api-gw-ssl-enabled

• etichettato con api-gw-stage-

• api-gw-xray-enabled

• descrizione dell'applicazione appconfigg

• appconfig-application-tagged

• appconfig-configuration-profile-taggato

• appconfig-configuration-profile-validators-non-empty

• descrizione della strategia di distribuzione di appconfig-deployment

• appconfig-deployment-strategy-time-final-bake-time

• appconfig-deployment-strategy-replicate-to-ssm

• etichettato con appconfig-deployment-strategy-

• descrizione dell'ambiente di appconfig

• etichettato con appconfig-environment

• appconfig-extension-association-tagged

• appconfig-freeform-profile-config-storage

• descrizione della versione di appconfig-hosted-configuration-

• taggato con appflow-flow

• appflow-flow-trigger-type-check

• appintegrations-application-approved-origins-check

• appintegrations-application-taggato

• appintegrations-event-integration-description

• appintegrations-event-integration-taggato

• appmesh-gateway-route-taggato

• appmesh-mesh-deny-tcp-forwarding

• appmesh-mesh-ip-pref-check

• taggato con appmesh-mesh

• appmesh-route-taggato

• appmesh-virtual-gateway-backend-defaults-tls

• appmesh-virtual-gateway-listeners-health-check-abilitato

• appmesh-virtual-gateway-logging-file-path-exists

• taggato con appmesh-virtual-gateway-

• appmesh-virtual-node-backend-defaults-tls-on

• appmesh-virtual-node-cloud-map-ip-pref-check

• appmesh-virtual-node-dns-ip-pref-check

• appmesh-virtual-node-listeners-health-check-abilitato

• appmesh-virtual-node-listeners-outlier-detect-abilitato

• appmesh-virtual-node-logging-file-path-exists

• appmesh-virtual-node-service-backends-tls-enforced

• taggato con appmesh-virtual-node

• taggato con appmesh-virtual-router

• appmesh-virtual-service-taggato

• approved-amis-by-id

• approved-amis-by-tag

• servizio-apprunner-in-vpc

• applunner-service-ip-address-type-check

• apprunner-service-max-unhealthy-threshold

• apprunner-service-no-public access

• apprunner-service-ability-enabled

• apprunner-service-taggato

• apprunner-vpc-connector-taggato

• flotta-appstream-in-vpc

• appsync-associated-with-waf

• appsync-authorization-check

• appsync-cache-ct-encryption-at-rest

• appsync-cache-ct-encryption-in-transit

• appsync-cache-encryption-at-rest

• abilitato per appsync-graphql-api-xray

• appsync-logging-enabled

• etichettato con aps-rule-groups-namespace

• descrizione del catalogo dei dati di athena

• descrizione della dichiarazione preparata da athena

• descrizione del gruppo di lavoro athena

• athena-workgroup-encrypted-at-rest

• athena-workgroup-enforce-workgroup-configuration

• athena-workgroup-engine-version-auto-upgrade

• athena-workgroup-logging-abilitato

• auditmanager-assessment-taggato

• aurora-global-database-encryption-at-rest

• aurora-last-backup-recovery-point-created

• aurora-meets-restore-time-target

• aurora-mysql-backtracking-enabled

• aurora-mysql-cluster-audit-logging

• aurora-risorse-in-logicamente-air-gapped-vault

• aurora-resources-protected-by-backup-plan

• autoscaling-capacity-rebalancing

• autoscaling-group-elb-healthcheck-required

• autoscaling-launchconfig-requires-imdsv2

• autoscaling-launch-config-hop-limit

• autoscaling-launch-config-public-ip-disabled

• autoscaling-launch-template

• autoscaling-multiple-az

• autoscaling-multiple-instance-types

• backup-plan-min-frequency-and-min-retention-check

• backup-recovery-point-encrypted

• backup-recovery-point-manual-deletion-disabled

• backup-recovery-point-minimum-retention-check

• abilitato per l'ambiente di elaborazione in batch

• ambiente di elaborazione in batch gestito

• etichettato in ambiente di calcolo in batch

• abilitato alla coda di lavoro in modalità batch-job-

• taggato batch-job-queue-

• ambiente di calcolo gestito in batch utilizzando un modello di avvio

• controllo della strategia di allocazione dell'ambiente di calcolo gestito in batch

• batch-managed-compute-env-compute-resources-taggato

• spot-compute-environment-max-bid gestito in batch

• etichettato con politica di pianificazione dei lotti

• beanstalk-enhanced-health-reporting-enabled

• bedrockagent core-code interpreter-networkmode-check

• bedrockagentcore-gateway-authorizer-abilitato

• bedrockagentcore-runtime-private-network-required

• bedrock-agentcore-memory-encryption-enabled

• abilitato per la crittografia dell'origine dei dati bedrock

• taggato con cassandra-keyspace

• clb-desync-mode-check

• clb-multiple-az

• cloudformation-stack-drift-detection-check

• cloudformation-stack-notification-check

• cloudformation-stack-service-role-check

• cloudformation-termination-protection-check

• cloudfront-accesslogs-enabled

• cloudfront-associated-with-waf

• cloudfront-custom-ssl-certificate

• cloudfront-default-root-object-configured

• cloudfront-distribution-key-group-enabled

• cloudfront-no-deprecated-ssl-protocols

• cloudfront-origin-access-identity-enabled

• cloudfront-origin-failover-enabled

• abilitato per cloudfront-origin-lambda-url-oac

• cloudfront-s3-origin-access-control-enabled

• cloudfront-s3-origin-non-existent-bucket

• cloudfront-security-policy-check

• cloudfront-sni-enabled

• cloudfront-ssl-policy-check

• cloudfront-traffic-to-origin-encrypted

• cloudfront-viewer-policy-https

• cloudtrail-all-read-s3-data-event-check

• cloudtrail-all-write-s3-data-event-check

• cloudtrail-event-data-store-multi-regione

• registrazione degli accessi a cloudtrail-s3-bucket-

• cloudtrail-s3-bucket-accesso pubblico vietato

• cloudtrail-s3-dataevents-enabled

• cloudtrail-security-trail-enabled

• cloudwatch-alarm-action-check

• cloudwatch-alarm-action-enabled-check

• descrizione di cloudwatch-alarm-

• cloudwatch-alarm-resource-check

• cloudwatch-alarm-settings-check

• cloudwatch-log-group-encrypted

• taggato con cloudwatch-metric-stream

• cloud-trail-cloud-watch-logs-enabled

• cloud-trail-enabled

• cloud-trail-encryption-enabled

• cloud-trail-log-file-validation-enabled

• cmk-backing-key-rotation-enabled

• codiceartifact-repository-taggato

• codebuild-project-artifact-encryption

• codebuild-project-environment-privileged-check

• codebuild-project-envvar-awscred-check

• codebuild-project-logging-enabled

• codebuild-project-s3-logs-encrypted

• codebuild-project-source-repo-url-check

• codificato con codebuild-project

• codebuild-report-group-crittografato a riposo

• etichettato con codebuild-report-group-

• codedeploy-auto-rollback-monitor-enabled

• codedeploy-deployment-group-abilitato per il rollback automatico

• codedeploy-deployment-group-outdated-instances-update

• codedeploy-ec2-minimum-healthy-hosts-configured

• codedeploy-lambda-allatonce-traffic-shift-disabled

• codeguruprofiler-profiling-group-taggato

• codegurureviewer-repository-association-tagged

• codepipeline-deployment-count-check

• codepipeline-region-fanout-check

• cognito-identity-pool-accessi non autenticati

• cognito-identity-pool-unauth-access-check

• cognito-userpool-cust-auth-threat-fullcheck

• abilitata alla sicurezza avanzata con cognito-user-pool-

• abilitata la protezione da eliminazione del pool di utenti cognito

• abilitato per cognito-user-pool-mfa

• cognito-user-pool-password-policy-check

• taggato con cognito-user-pool-

• abilitata la registrazione delle istanze di connessione

• profili clienti con tag di dominio

• customerprofiles-object-type-allow-profile-creation

• customerprofiles-object-type-tagged

• custom-eventbus-policy-attached

• custom-schema-registry-policy-attached

• cw-loggroup-retention-period-check

• datasync-location-object-storage-using-https

• datasync-task-data-verifica-abilitata

• datasync-task-logging-abilitato

• etichettato con datasync-task-

• dax-encryption-enabled

• crittografia dax-tls-endpoint

• db-instance-backup-enabled

• desired-instance-tenancy

• desired-instance-type

• dms-auto-minor-version-upgrade-check

• dms-endpoint-ssl-configured

• etichettato dms-endpoint

• dms-mongo-db-autenticazione abilitata

• dms-neptune-iam-autorizzazione-abilitata

• dms-redis-tls-abilitato

• istanza di replica dms-multiaz abilitata

• dms-replication-not-public

• dms-replication-task-sourcedb-logging

• contrassegnato con dms-replication-task-

• dms-replication-task-targetdb-logging

• docdb-cluster-audit-logging-enabled

• docdb-cluster-backup-retention-check

• docdb-cluster-deletion-protection-enabled

• docdb-cluster-encrypted

• docdb-cluster-crittografato in transito

• docdb-cluster-snapshot-public-prohibited

• dynamodb-autoscaling-enabled

• dynamodb-in-backup-plan

• dynamodb-last-backup-recovery-point-created

• dynamodb-meets-restore-time-target

• dynamodb-pitr-enabled

• dynamodb-resources-protected-by-backup-plan

• dynamodb-table-deletion-protection-enabled

• dynamodb-table-encrypted-kms

• dynamodb-table-encryption-enabled

• dynamodb-throughput-limit-check

• ebs-in-backup-plan

• ebs-last-backup-recovery-point-created

• ebs-meets-restore-time-target

• ebs-optimized-instance

• ebs-resources-in-logicamente-air-gapped-vault

• ebs-resources-protected-by-backup-plan

• ebs-snapshot-block-accesso pubblico

• ebs-snapshot-public-restorable-check

• contrassegnato con ec2-capacity-reservation-

• etichettato con ec2-carrier-gateway-

• ec2-client-vpn-connection-log-enabled

• contrassegnato con ec2-client-vpn-endpoint

• ec2-client-vpn-not-authorize-all

• ec2-dhcp-options-taggato

• ec2-ebs-encryption-by-default

• ec2-enis-source-destination-check-abilitato

• contrassegnato con ec2-fleet

• ec2-imdsv2-check

• ec2-instance-detailed-monitoring-enabled

• istanza ec2-lanciata-con-ami-consentito-

• ec2-instance-managed-by-ssm

• ec2-instance-multiple-eni-check

• ec2-instance-no-public-ip

• ec2-instance-profile-attached

• contrassegnato con ec2-ipamscope

• ec2-last-backup-recovery-point-created

• ec2-launchtemplate-ebs-encrypted

• ec2-launch-templates-ebs-volume-crittografato

• ec2-launch-template-imdsv2-check

• ec2-launch-template-public-ip-disabled

• ec2-launch-template-taggato

• ec2-managedinstance-applications-blacklisted

• ec2-managedinstance-applications-required

• ec2-managedinstance-association-compliance-status-check

• ec2-managedinstance-inventory-blacklisted

• ec2-managedinstance-patch-compliance-status-check

• ec2-managedinstance-platform-check

• ec2-meets-restore-time-target

• ec2-network-insights-access-scope-analysis-taggato

• contrassegnato con ec2-network-insights-access-scope-taggato

• ec2-network-insights-analysis-taggato

• contrassegnato con ec2-network-insights-path-

• ec2-no-amazon-key-pair

• ec2-paravirtual-instance-check

• ec2-prefix-list-taggato

• ec2-resources-in-logicamente-air-gapped-vault

• ec2-resources-protected-by-backup-plan

• ec2-security-group-attached-to-eni

• ec2-security-group-attached-to-eni-periodic

• ec2-spot-fleet-request-ct-encryption-at-rest

• ec2-stopped-instance

• ec2-token-hop-limit-check

• descrizione del filtro ec2-traffic-mirror-

• ec2-traffic-mirror-filter-taggato

• descrizione della sessione ec2-traffic-mirror-

• ec2-traffic-mirror-session-taggato

• descrizione di ec2-traffic-mirror-target-

• contrassegnato con ec2-traffic-mirror-target-

• ec2-transit-gateway-auto-vpc-attach-disabled

• ec2-transit-gateway-multicast-domain-taggato

• ec2-volume-inuse-check

• connessione ec2-vpn-ike-version-check

• ec2-vpn-connection-logging abilitato

• ec2-vpn-connection-taggato

• ecr-private-image-scanning-enabled

• ecr-private-lifecycle-policy-configured

• ecr-private-tag-immutability-enabled

• ecr-repository-cmk-encryption-enabled

• contrassegnato con ecr-repository-

• ecs-awsvpc-networking-enabled

• etichettato con ecs-capacity-provider-

• ecs-capacity-provider-termination-check

• ecs-containers-nonprivileged

• ecs-containers-readonly-access

• ecs-container-insights-enabled

• ecs-fargate-latest-platform-version

• ecs-no-environment-secrets

• ecs-service-propagate-tags-abilitato

• ecs-task-definition-efs-encryption-abilitato

• ecs-task-definition-linux-user-non-root

• ecs-task-definition-log-configuration

• ecs-task-definition-memory-hard-limit

• ecs-task-definition-network-mode-not-host

• ecs-task-definition-nonroot-user

• ecs-task-definition-pid-mode-check

• ecs-task-definition-user-for-host-mode-check

• ecs-task-definition-windows-user-non-admin

• efs-access-point-enforce-root-directory

• efs-access-point-enforce-user-identity

• efs-automatic-backups-abilitato

• efs-encrypted-check

• efs-filesystem-ct-crittografato

• etichettato con efs-file-system

• efs-in-backup-plan

• efs-last-backup-recovery-point-created

• efs-meets-restore-time-target

• efs-mount-target-accessibile al pubblico

• efs-resources-in-logicamente-air-gapped-vault

• efs-resources-protected-by-backup-plan

• eip-attached

• taggato con eks-addon

• eks-cluster-logging-enabled

• eks-cluster-log-enabled

• eks-cluster-oldest-supported-version

• eks-cluster-secrets-crittografato

• eks-cluster-supported-version

• eks-endpoint-no-public-access

• eks-fargate-profile-taggato

• controllo della versione supportata da eks-nodegroup-

• eks-secrets-encrypted

• abilitato per elasticache-automatic-backup-check

• elasticache-auto-minor-version-upgrade-check

• elasticache-rbac-auth-enabled

• elasticache-redis-cluster-automatic-backup-check

• elasticache-repl-grp-auto-failover-enabled

• elasticache-repl-grp-encrypted-at-rest

• elasticache-repl-grp-encrypted-in-transit

• elasticache-repl-grp-redis-auth-enabled

• elasticache-subnet-group-check

• elasticache-supported-engine-version

• elasticbeanstalk-applicazione-descrizione

• elasticbeanstalk-application-version-description

• elasticbeanstalk-environment-descrizione

• elasticsearch-encrypted-at-rest

• elasticsearch-in-vpc-only

• elasticsearch-logs-to-cloudwatch

• elasticsearch-node-to-node-encryption-check

• elastic-beanstalk-logs-to-cloudwatch

• elastic-beanstalk-managed-updates-enabled

• elbv2-acm-certificate-required

• elbv2-listener-encryption-in-transit

• elbv2-multiple-az

• elbv2-predefined-security-policy-ssl-check

• elbv2-targetgroup-healthcheck-protocol-encrypted

• elbv2-targetgroup-protocol-crittografato

• elb-acm-certificate-required

• elb-cross-zone-load-balancing-enabled

• elb-custom-security-policy-ssl-check

• elb-deletion-protection-enabled

• elb-internal-scheme-check

• elb-logging-enabled

• elb-predefined-security-policy-ssl-check

• etichettato con elb

• elb-tls-https-listeners-only

• emr-block-public-access

• emr-kerberos-enabled

• emr-master-no-public-ip

• emr-security-configuration-encryption-rest

• emr-security-configuration-encryption-transit

• encrypted-volumes

• eventschemas-discoverer-tagged

• eventschemas-registry-taggato

• event-data-store-cmk-encryption-enabled

• evidentemente la descrizione del lancio

• evidentemente taggato dal lancio

• evidentemente descrizione del progetto

• evidentemente etichettato come progetto

• evidentemente descrizione del segmento

• evidentemente etichettata per segmenti

• fis-experiment-template-log-configuration-exists

• taggato con fis-experiment-template-

• fms-shield-resource-policy-check

• fms-webacl-resource-policy-check

• fms-webacl-rulegroup-association-check

• frauddetector-entity-type-tagged

• frauddetector-label-tagged

• frauddetector-outcome-taggato

• frauddetector-variable-tagged

• fsx-last-backup-recovery-point-created

• fsx-lustre-copy-tags-to-backups

• fsx-meets-restore-time-target

• fsx-ontap-deployment-type-check

• fsx-openzfs-copy-tags-enabled

• fsx-openzfs-deployment-type-check

• fsx-resources-protected-by-backup-plan

• fsx-windows-audit-log-configured

• fsx-windows-deployment-type-check

• taggato con glb-listener

• etichettato con glb

• global-endpoint-event-replication-enabled

• glue-job-logging abilitato

• glue-ml-transform-criptato a riposo

• etichettato con glue-ml-transform-

• versione supportata da glue-spark-job

• groundstation-config-taggato

• groundstation-dataflowendpointgroup-taggato

• groundstation-mission profil-taggato

• guardduty-ec2-protezione-abilitato per il runtime

• guardduty-ecs-protection-runtime-abilitato

• abilitata per guardduty-eks-protezione-audit-

• guardduty-eks-protezione-abilitato per il runtime

• guardduty-enabled-centralized

• abilitato alla protezione guardduty-lambda

• protezione da malware abilitata per guardduty

• guardduty-non-archived-findings

• protezione guardduty-rds abilitata

• abilitato per il monitoraggio del tempo di esecuzione di guardduty

• protezione abilitata per guardduty-s3

• etichettato con healthlake-fhirdatastore

• iam-customer-policy-blocked-kms-actions

• abilitato per iam-external-access-analyzer

• iam-group-has-users-check

• iam-inline-policy-blocked-kms-actions

• iam-no-inline-policy-check

• iam-oidc-provider-id-client-list-check

• taggato con iam-oidc-provider-

• iam-password-policy

• iam-policy-blacklisted-check

• descrizione della politica in materia di iam-policy

• iam-policy-in-use

• iam-policy-no-statements-with-admin-access

• iam-policy-no-statements-with-full-access

• iam-role-managed-policy-check

• iam-root-access-key-check

• taggato con iam-saml-provider-

• iam-server-certificate-expiration-check

• taggato con certificato iam-server-

• iam-user-group-membership-check

• iam-user-mfa-enabled

• iam-user-no-policies-check

• iam-user-unused-credentials-check

• imagebuilder-distributionconfiguration-taggato

• taggato con imagebuilder-imagepipeline

• imagebuilder-imagerecipe-ebs-volumes-crittografato

• taggato con imagebuilder-imagerecipe-

• imagebuilder-infrastructureconfiguration-taggato

• incoming-ssh-disabled

• abilitato per inspector-ec2-scan

• abilitato per inspector-ecr-scan

• abilitato per la scansione del codice lambda con inspector-lambda

• abilitato per inspector-lambda-standard-scan

• instances-in-vpc

• internet-gateway-authorized-vpc-only

• iotdevicedefender-custom-metric-taggato

• iotevents-alarm-model-taggato

• etichettato con iotevents-detector-model

• iotevents-input-taggato

• taggato con iotsitewise-asset-model

• taggato con iotsitewise-dashboard

• taggato con iotsitewise-gateway

• taggato con iotsitewise-portal

• taggato con iotsitewise-project

• tipo-componente con tag iottwinmaker-

• taggato con entità iottwinmaker

• taggato con iottwinmaker-scene

• taggato con iottwinmaker-sync-job-

• taggato con iottwinmaker-workspace

• contrassegnato con iotwireless-fuota-task-

• contrassegnato con iotwireless-multicast-group

• con tag iotwireless-service-profile-

• iot-authorizer-token-signing-abilitato

• template-taggato con iot-job-

• descrizione del modello di provisioning iot

• iot-provisioning-template-jitp

• template con tag iot-provisioning-

• contrassegnato con iot-scheduled-audit-

• ivs-channel-playback-authorization-enabled

• contrassegnato con ivs-channel

• ivs-playback-keypair-taggato

• contrassegnato con tag ivs-recording-configuration-

• contrassegnato con kendra-index-

• taggato nel canale di segnalazione video kinesis

• taggato con kinesisvideo-stream

• kinesis-firehose-delivery-stream crittografato

• kinesis-stream-backup-retention-check

• kinesis-stream-encrypted

• kinesis-video-stream-minima-conservazione dei dati

• kms-cmk-not-scheduled-for-deletion

• kms-key-policy-no-public-access

• kms-key-taggato

• lambda-concurrency-check

• lambda-dlq-check

• funzione lambda-application-log-level-check

• descrizione della funzione lambda

• funzione-lambda-log-format-json

• lambda-function-public-access-prohibited

• lambda-function-settings-check

• funzione lambda-system-log-level-check

• funzione lambda-abilitata per xray

• lambda-inside-vpc

• lambda-vpc-multi-az-check

• lightsail-bucket-allow-public-overrides-disabilitato

• lightsail-bucket-object-versioning-abilitato

• etichettato con lightsail-bucket

• etichettato con certificato lightsailer

• etichettato con lightsail-disk

• macie-auto-sensitive-data-discovery-check

• macie-status-check

• mariadb-publish-logs-to-cloudwatch-logs

• pacchetto multimediale con tag di configurazione del pacchetto

• mediatailor-playbackconfiguration-taggato

• taggato con memorydb-subnetgroup

• mfa-enabled-for-iam-console-access

• autenticazione mq-active-broker-ldap

• mq-active-deployment-mode

• mq-active-single-instance-broker-storage-type-efs

• mq-automatic-minor-version-upgrade-enabled

• mq-auto-minor-version-upgrade-enabled

• mq-broker-general-logging abilitato

• mq-cloudwatch-audit-logging-enabled

• abilitato per mq-cloudwatch-audit-log

• mq-no-public-access

• mq-rabbit-deployment-mode

• msk-cluster-public-access-disabilitato

• contrassegnato con msk-cluster-

• msk-connect-connector-logging-abilitato

• msk-enhanced-monitoring-enabled

• msk-in-cluster-node-require-tls

• msk-unrestricted-access-check

• multi-region-cloud-trail-enabled

• nacl-no-unrestricted-ssh-rdp

• neptune-cluster-backup-retention-check

• neptune-cluster-cloudwatch-log-export-enabled

• neptune-cluster-copy-tags-to-snapshot-enabled

• neptune-cluster-deletion-protection-enabled

• neptune-cluster-encrypted

• neptune-cluster-iam-database-authentication

• neptune-cluster-multi-az-enabled

• neptune-cluster-snapshot-encrypted

• neptune-cluster-snapshot-iam-database-auth-abilitato

• neptune-cluster-snapshot-public-prohibited

• netfw-deletion-protection-enabled

• netfw-logging-enabled

• netfw-multi-az-enabled

• netfw-policy-default-action-fragment-packets

• netfw-policy-default-action-full-packets

• netfw-policy-rule-group-associated

• netfw-stateless-rule-group-not-empty

• abilitato alla protezione netfw-subnet-change-

• nlb-cross-zone-load-balancing-enabled

• nlb-internal-scheme-check

• etichettato con nlb-listener

• nlb-logging abilitato

• etichettato nlb

• no-unrestricted-route-to-igw

• opensearchserverless-collection-description

• opensearchserverless-collection-standbyreplicas-enabled

• opensearch-access-control-enabled

• opensearch-audit-logging-enabled

• opensearch-data-node-fault-tolerance

• opensearch-encrypted-at-rest

• opensearch-https-required

• opensearch-in-vpc-only

• opensearch-logs-to-cloudwatch

• opensearch-node-to-node-encryption-check

• opensearch-primary-node-fault-tolerance

• opensearch-update-check

• pacchetto panorama-taggato

• versione supportata da rabbit-mq

• rds-aurora-mysql-audit-logging-enabled

• rds-aurora-postgresql-logs-to-cloudwatch

• rds-automatic-minor-version-upgrade-enabled

• rds-cluster-auto-minor-version-upgrade-enable

• rds-cluster-backup-retention-check

• rds-cluster-default-admin-check

• rds-cluster-deletion-protection-enabled

• rds-cluster-encrypted-at-rest

• rds-cluster-iam-authentication-enabled

• rds-cluster-multi-az-enabled

• rds-db-security-group-not-allowed

• rds-enhanced-monitoring-enabled

• rds-event-subscription-taggato

• versione-supportata da rds-global-cluster-aurora-mysql

• rds-instance-default-admin-check

• rds-instance-deletion-protection-enabled

• rds-instance-iam-authentication-enabled

• rds-instance-public-access-check

• rds-instance-subnet-igw-check

• rds-in-backup-plan

• rds-last-backup-recovery-point-created

• rds-logging-enabled

• rds-mariadb-instance-crittografata-in-transito

• rds-meets-restore-time-target

• rds-multi-az-support

• rds-mysql-cluster-copy-tags-to-snapshot-check

• rds-mysql-instance-crittografata-in-transito

• rds-option-group-taggato

• rds-pgsql-cluster-copy-tags-to-snapshot-check

• rds-postgresql-logs-to-cloudwatch

• istanza rds-postgres-crittografata in transito

• crittografia rds-proxy-tls

• rds-resources-protected-by-backup-plan

• rds-snapshots-public-prohibited

• rds-snapshot-encrypted

• rds-sqlserver-crittografato in transito

• rds-sql-server-logs-to-cloudwatch

• rds-storage-encrypted

• redshift-audit-logging-enabled

• redshift-backup-enabled

• redshift-cluster-configuration-check

• redshift-cluster-kms-enabled

• redshift-cluster-maintenancesettings-check

• abilitato per redshift-cluster-multi-az

• redshift-cluster-parameter-group-taggato

• redshift-cluster-public-access-check

• redshift-cluster-subnet-group-multi-az

• redshift-default-admin-check

• redshift-default-db-name-check

• redshift-enhanced-vpc-routing-enabled

• redshift-require-tls-ssl

• redshift-serverless-default-admin-check

• redshift-serverless-default-db-name-check

• crittografia redshift-serverless-namespace-cmk-

• redshift-serverless-publish-logs-to-cloudwatch

• redshift-serverless-workgroup-crittografato in transito

• redshift-serverless-workgroup-no-accesso pubblico

• redshift-serverless-workgroup-routes-within-vpc

• accesso illimitato alla porta redshift

• required-tags

• etichettato con resiliencehub-app

• resiliencehub-resiliencypolicy-taggato

• restricted-incoming-traffic

• root-account-hardware-mfa-enabled

• root-account-mfa-enabled

• route53 - heth-check-tagged

• route53-hosted-zone-contrassegnata

• route53-query-logging-enabled

• route53-resolver-firewall-domain-list-tagged

• taggato con route53-resolver-firewall-rule-group-association-

• taggato con route53-resolver-firewall-rule-group-

• etichettato con route53-resolver-resolver-endpoint

• etichettato con route53-resolver-resolver-rule-

• rum-app-monitor-cloudwatch-logs-abilitato

• taggato con rum-app-monitor-

• s3express-dir-bucket-lifecycle-rules-check

• s3-access-point-in-vpc-only

• s3-access-point-public-access-blocks

• s3-account-level-public-access-blocks

• s3-account-level-public-access-blocks-periodic

• s3-bucket-acl-prohibited

• s3-bucket-blacklisted-actions-prohibited

• s3-bucket abilitato per la replica tra regioni

• s3-bucket-default-lock-enabled

• s3-bucket-level-public-access-prohibited

• s3-bucket-logging-enabled

• s3-bucket-mfa-delete-enabled

• s3-bucket-policy-grantee-check

• s3-bucket-policy-not-more-permissive

• s3-bucket-public-read-prohibited

• s3-bucket-public-write-prohibited

• s3-bucket-replication-enabled

• s3-bucket-server-side-encryption-enabled

• s3-bucket-ssl-requests-only

• etichettato con s3-bucket

• s3-bucket-versioning-enabled

• s3-default-encryption-kms

• s3-directory-bucket-lifecycle-policy-rule-check

• s3-event-notifications-enabled

• s3-last-backup-recovery-point-created

• s3-lifecycle-policy-check

• s3-meets-restore-time-target

• risorse s3-in-logicamente-air-gapped-vault

• s3-resources-protected-by-backup-plan

• s3-version-lifecycle-policy-check

• taggato con sagemaker-app-image-config-

• sagemaker-data-quality-job-encrypt-in-transit

• sagemaker-data-quality-job-isolation

• dominio-sagemaker-in-vpc

• taggato con dominio sagemaker

• sagemaker-endpoint-configuration-kms-key-configured

• sagemaker-endpoint-config-kms-key-required

• sagemaker-endpoint-config-prod-instance-count

• sagemaker-featuregroup-description

• sagemaker-featuregroup-encryption-at-rest

• crittografia sagemaker-featuregroup-online-store-

• taggato con sagemaker-feature-group

• descrizione dell'immagine con sagemaker

• taggato con sagemaker

• taggato con sagemaker inferenceexperiment-

• sagemaker-inf-experiment-data-storage-kms-crittografato

• sagemaker-inf-experiment-instance-storage-kms-crittografato

• sagemaker-model-bias-job-encrypt-in-transit

• sagemaker-model-bias-job-isolation

• sagemaker-model-explainability-job-encrypt-in-transit

• sagemaker-model-explainability-job-network-isolation

• modello-sagemaker-in-vpc

• abilitato all'isolamento del modello sagemaker

• registro privato sagemaker-model-multicontainer-

• sagemaker-model-private-registry-obbligatorio

• sagemaker-model-quality-job-definition-isolation

• sagemaker-model-quality-job-encrypt-in-transit

• sagemaker-monitoring-schedule-isolation

• sagemaker-monitoring-schedule-traffic-encryption

• sagemaker-notebook-instance-inside-vpc

• sagemaker-notebook-instance-kms-key-configured

• versione-della-platform-sagemaker-notebook-instance-

• sagemaker-notebook-instance-root-access-check

• sagemaker-notebook-instance-storage-vol-kms-crittografata

• sagemaker-notebook-no-direct-internet-access

• secretsmanager-rotation-enabled-check

• secretsmanager-scheduled-rotation-success-check

• secretsmanager-secret-periodic-rotation

• secretsmanager-secret-unused

• secretsmanager-using-cmk

• securityhub-enabled

• security-account-information-provided

• service-catalog-portfolio-taggato

• catalogo-di-servizi-condiviso all'interno dell'organizzazione

• service-vpc-endpoint-enabled

• ses-malware-scanning-enabled

• ses-sending-tls-required

• shield-advanced-enabled-autorenew

• shield-drt-access

• signer-signingprofile - taggato

• sns-encrypted-kms

• sns-topic-message-delivery-notification-enabled

• sns-topic-nessun accesso pubblico

• sqs-queue-dlq-check

• sqs-queue-senza accesso pubblico

• sqs-queue-policy-controllo di accesso completo

• ssm-automation-block-public-sharing

• ssm-automation-logging abilitato

• ssm-document-not-public

• con tag ssm-document

• stepfunctions-state-machine-taggato

• step-functions-state-machine-logging-enabled

• storagegateway-last-backup-recovery-point-created

• risorse-di-storagegateway-in-logicamente-air-gapped-vault

• storagegateway-resources-protected-by-backup-plan

• subnet-auto-assign-public-ip-disabled

• descrizione del contratto di trasferimento

• contratto di trasferimento etichettato

• descrizione del certificato di trasferimento

• certificato di trasferimento etichettato

• transfer-connector-as2-encryption-algorithm-check

• transfer-connector-as2-mdn-signing-algorithm-check

• transfer-connector-as2-signing-algorithm-check

• transfer-connector-logging-abilitato

• transfer-connector-taggato

• transfer-family-server-no-ftp

• transfer-profile-taggato

• descrizione del flusso di lavoro di trasferimento

• transfer-workflow-taggato

• virtualmachine-last-backup-recovery-point-created

• risorse della macchina virtuale in un vault logicamente airgapped

• virtualmachine-resources-protected-by-backup-plan

• vpc-default-security-group-closed

• abilitato per vpc-endpoint

• vpc-flow-logs-enabled

• vpc-network-acl-unused-check

• vpc-peering-dns-resolution-check

• vpc-sg-open-only-to-authorized-ports

• vpc-sg-port-restriction-check

• vpc-vpn-2-tunnels-up

• wafv2-logging-enabled

• wafv2-rulegroup-logging-enabled

• wafv2-rulegroup-not-empty

• wafv2-webacl-not-empty

• waf-classic-logging-enabled

• waf-global-rulegroup-not-empty

• waf-global-rule-not-empty

• waf-global-webacl-not-empty

• waf-regional-rulegroup-not-empty

• waf-regional-rule-not-empty

• waf-regional-webacl-not-empty

• workspaces-connection-alias-taggato

• workspaces-root-volume-encryption-enabled

• workspaces-user-volume-encryption-abilitato

• workspaces-workspace-taggato

• access-keys-rotated

• account-part-of-organizations

• con tag acmpca-certificate-authority-

• acm-certificate-expiration-check

• acm-certificate-rsa-check

• acm-certificate-transparent-logging-abilitata

• acm-pca-root-ca-disabled

• versione supportata da active-mq-

• alb-desync-mode-check

• alb-http-drop-invalid-header-enabled

• alb-http-to-https-redirection-check

• alb-internal-scheme-check

• etichettato con alb-listener

• etichettato con alb-tag

• alb-waf-enabled

• amplify-app-branch-abilitato alla cancellazione automatica

• amplify-app-build-spec-configurato

• descrizione dell'app amplifica

• amplify-app-no-variabili di ambiente

• amplify-app-platform-check

• etichettato con amplify-app

• abilitato per amplify-branch-auto-build

• amplify-branch-build-spec-configurato

• amplify-branch-descrizione

• amplify-branch-framework configurato

• abilitato per la modalità amplify-branch-performance

• abilitato per amplify-branch-pull-request-preview-

• etichettato con amplify-branch

• apigatewayv2-integration-private-https-abilitato

• apigatewayv2-stage-descrizione

• nome-dominio-apigateway-tls-check

• apigateway-stage-access-logs-abilitato

• descrizione di apigateway-stage-

• api-gwv2-access-logs-enabled

• api-gwv2-authorization-type-configured

• api-gwv2-stage-default-route-detailed-metrics-abilitato

• api-gw-associated-with-waf

• api-gw-cache-enabled-and-encrypted

• api-gw-endpoint-type-check

• api-gw-execution-logging-enabled

• api-gw-rest-api-contrassegnato

• api-gw-ssl-enabled

• etichettato con api-gw-stage-

• api-gw-xray-enabled

• descrizione dell'applicazione appconfigg

• appconfig-application-tagged

• appconfig-configuration-profile-taggato

• appconfig-configuration-profile-validators-non-empty

• descrizione della strategia di distribuzione di appconfig-deployment

• appconfig-deployment-strategy-time-final-bake-time

• appconfig-deployment-strategy-replicate-to-ssm

• etichettato con appconfig-deployment-strategy-

• descrizione dell'ambiente di appconfig

• etichettato con appconfig-environment

• appconfig-extension-association-tagged

• appconfig-freeform-profile-config-storage

• descrizione della versione di appconfig-hosted-configuration-

• taggato con appflow-flow

• appflow-flow-trigger-type-check

• appmesh-gateway-route-taggato

• appmesh-mesh-deny-tcp-forwarding

• appmesh-mesh-ip-pref-check

• taggato con appmesh-mesh

• appmesh-route-taggato

• appmesh-virtual-gateway-backend-defaults-tls

• appmesh-virtual-gateway-listeners-health-check-abilitato

• appmesh-virtual-gateway-logging-file-path-exists

• taggato con appmesh-virtual-gateway-

• appmesh-virtual-node-backend-defaults-tls-on

• appmesh-virtual-node-cloud-map-ip-pref-check

• appmesh-virtual-node-dns-ip-pref-check

• appmesh-virtual-node-listeners-health-check-abilitato

• appmesh-virtual-node-listeners-outlier-detect-abilitato

• appmesh-virtual-node-logging-file-path-exists

• appmesh-virtual-node-service-backends-tls-enforced

• taggato con appmesh-virtual-node

• taggato con appmesh-virtual-router

• appmesh-virtual-service-taggato

• approved-amis-by-id

• approved-amis-by-tag

• appsync-associated-with-waf

• appsync-authorization-check

• appsync-cache-encryption-at-rest

• abilitato per appsync-graphql-api-xray

• appsync-logging-enabled

• descrizione del catalogo dati athena

• descrizione della dichiarazione preparata da athena

• descrizione del gruppo di lavoro athena

• athena-workgroup-encrypted-at-rest

• athena-workgroup-enforce-workgroup-configuration

• athena-workgroup-engine-version-auto-upgrade

• athena-workgroup-logging-abilitato

• auditmanager-assessment-taggato

• aurora-global-database-encryption-at-rest

• aurora-last-backup-recovery-point-created

• aurora-meets-restore-time-target

• aurora-mysql-backtracking-enabled

• aurora-mysql-cluster-audit-logging

• aurora-risorse-in-logicamente-air-gapped-vault

• aurora-resources-protected-by-backup-plan

• autoscaling-capacity-rebalancing

• autoscaling-group-elb-healthcheck-required

• autoscaling-launchconfig-requires-imdsv2

• autoscaling-launch-config-hop-limit

• autoscaling-launch-config-public-ip-disabled

• autoscaling-launch-template

• autoscaling-multiple-az

• autoscaling-multiple-instance-types

• backup-plan-min-frequency-and-min-retention-check

• backup-recovery-point-encrypted

• backup-recovery-point-manual-deletion-disabled

• backup-recovery-point-minimum-retention-check

• abilitato per l'ambiente di elaborazione in batch

• ambiente di elaborazione in batch gestito

• etichettato in ambiente di calcolo in batch

• abilitato alla coda di lavoro in modalità batch-job-

• taggato batch-job-queue-

• ambiente di calcolo gestito in batch utilizzando un modello di avvio

• controllo della strategia di allocazione dell'ambiente di calcolo gestito in batch

• batch-managed-compute-env-compute-resources-taggato

• spot-compute-environment-max-bid gestito in batch

• etichettato con politica di pianificazione dei lotti

• beanstalk-enhanced-health-reporting-enabled

• taggato con cassandra-keyspace

• clb-desync-mode-check

• clb-multiple-az

• cloudformation-stack-drift-detection-check

• cloudformation-stack-notification-check

• cloudformation-stack-service-role-check

• cloudformation-termination-protection-check

• cloudtrail-all-read-s3-data-event-check

• cloudtrail-all-write-s3-data-event-check

• cloudtrail-event-data-store-multi-regione

• registrazione degli accessi a cloudtrail-s3-bucket-

• cloudtrail-s3-bucket-accesso pubblico vietato

• cloudtrail-s3-dataevents-enabled

• cloudtrail-security-trail-enabled

• cloudwatch-alarm-action-check

• cloudwatch-alarm-action-enabled-check

• descrizione di cloudwatch-alarm-

• cloudwatch-alarm-resource-check

• cloudwatch-alarm-settings-check

• cloudwatch-log-group-encrypted

• taggato con cloudwatch-metric-stream

• cloud-trail-cloud-watch-logs-enabled

• cloud-trail-enabled

• cloud-trail-encryption-enabled

• cloud-trail-log-file-validation-enabled

• cmk-backing-key-rotation-enabled

• codebuild-project-artifact-encryption

• codebuild-project-environment-privileged-check

• codebuild-project-envvar-awscred-check

• codebuild-project-logging-enabled

• codebuild-project-s3-logs-encrypted

• codebuild-project-source-repo-url-check

• codificato con codebuild-project

• codebuild-report-group-crittografato a riposo

• etichettato con codebuild-report-group-

• codedeploy-auto-rollback-monitor-enabled

• codedeploy-deployment-group-abilitato per il rollback automatico

• codedeploy-deployment-group-outdated-instances-update

• codedeploy-ec2-minimum-healthy-hosts-configured

• codedeploy-lambda-allatonce-traffic-shift-disabled

• codepipeline-deployment-count-check

• codepipeline-region-fanout-check

• cognito-identity-pool-accessi non autenticati

• cognito-identity-pool-unauth-access-check

• cognito-userpool-cust-auth-threat-fullcheck

• abilitata alla sicurezza avanzata con cognito-user-pool-

• abilitata la protezione da eliminazione del pool di utenti cognito

• abilitato per cognito-user-pool-mfa

• cognito-user-pool-password-policy-check

• taggato con cognito-user-pool-

• custom-eventbus-policy-attached

• custom-schema-registry-policy-attached

• cw-loggroup-retention-period-check

• datasync-location-object-storage-usando-https

• datasync-task-data-verifica-abilitata

• datasync-task-logging-abilitato

• etichettato con datasync-task-

• dax-encryption-enabled

• crittografia dax-tls-endpoint

• db-instance-backup-enabled

• desired-instance-tenancy

• desired-instance-type

• dms-auto-minor-version-upgrade-check

• dms-endpoint-ssl-configured

• etichettato dms-endpoint

• dms-mongo-db-autenticazione abilitata

• dms-neptune-iam-autorizzazione-abilitata

• dms-redis-tls-abilitato

• istanza di replica dms-multiaz abilitata

• dms-replication-not-public

• dms-replication-task-sourcedb-logging

• contrassegnato con dms-replication-task-

• dms-replication-task-targetdb-logging

• dynamodb-autoscaling-enabled

• dynamodb-in-backup-plan

• dynamodb-last-backup-recovery-point-created

• dynamodb-meets-restore-time-target

• dynamodb-pitr-enabled

• dynamodb-resources-protected-by-backup-plan

• dynamodb-table-deletion-protection-enabled

• dynamodb-table-encrypted-kms

• dynamodb-table-encryption-enabled

• dynamodb-throughput-limit-check

• ebs-in-backup-plan

• ebs-last-backup-recovery-point-created

• ebs-meets-restore-time-target

• ebs-optimized-instance

• ebs-resources-in-logicamente-air-gapped-vault

• ebs-resources-protected-by-backup-plan

• ebs-snapshot-block-accesso pubblico

• ebs-snapshot-public-restorable-check

• contrassegnato con ec2-capacity-reservation-

• ec2-client-vpn-connection-log-enabled

• contrassegnato con ec2-client-vpn-endpoint

• ec2-client-vpn-not-authorize-all

• ec2-dhcp-options-taggato

• ec2-ebs-encryption-by-default

• ec2-enis-source-destination-check-abilitato

• contrassegnato con ec2-fleet

• ec2-imdsv2-check

• ec2-instance-detailed-monitoring-enabled

• istanza ec2-lanciata-con-ami-consentito-

• ec2-instance-managed-by-ssm

• ec2-instance-multiple-eni-check

• ec2-instance-no-public-ip

• ec2-instance-profile-attached

• contrassegnato con ec2-ipamscope

• ec2-last-backup-recovery-point-created

• ec2-launchtemplate-ebs-encrypted

• ec2-launch-templates-ebs-volume-crittografato

• ec2-launch-template-imdsv2-check

• ec2-launch-template-public-ip-disabled

• ec2-launch-template-taggato

• ec2-managedinstance-applications-blacklisted

• ec2-managedinstance-applications-required

• ec2-managedinstance-association-compliance-status-check

• ec2-managedinstance-inventory-blacklisted

• ec2-managedinstance-patch-compliance-status-check

• ec2-managedinstance-platform-check

• ec2-meets-restore-time-target

• ec2-network-insights-access-scope-analysis-taggato

• contrassegnato con ec2-network-insights-access-scope-taggato

• ec2-network-insights-analysis-taggato

• contrassegnato con ec2-network-insights-path-

• ec2-no-amazon-key-pair

• ec2-paravirtual-instance-check

• ec2-prefix-list-taggato

• ec2-resources-in-logicamente-air-gapped-vault

• ec2-resources-protected-by-backup-plan

• ec2-security-group-attached-to-eni

• ec2-security-group-attached-to-eni-periodic

• ec2-spot-fleet-request-ct-encryption-at-rest

• ec2-stopped-instance

• ec2-token-hop-limit-check

• descrizione del filtro ec2-traffic-mirror-

• ec2-traffic-mirror-filter-taggato

• descrizione della sessione ec2-traffic-mirror-

• ec2-traffic-mirror-session-taggato

• descrizione di ec2-traffic-mirror-target-

• contrassegnato con ec2-traffic-mirror-target-

• ec2-transit-gateway-auto-vpc-attach-disabled

• ec2-transit-gateway-multicast-domain-taggato

• ec2-volume-inuse-check

• connessione ec2-vpn-ike-version-check

• ec2-vpn-connection-logging abilitato

• ec2-vpn-connection-taggato

• ecr-private-image-scanning-enabled

• ecr-private-lifecycle-policy-configured

• ecr-private-tag-immutability-enabled

• ecr-repository-cmk-encryption-enabled

• contrassegnato con ecr-repository-

• ecs-awsvpc-networking-enabled

• etichettato con ecs-capacity-provider-

• ecs-capacity-provider-termination-check

• ecs-containers-nonprivileged

• ecs-containers-readonly-access

• ecs-container-insights-enabled

• ecs-fargate-latest-platform-version

• ecs-no-environment-secrets

• ecs-service-propagate-tags-abilitato

• ecs-task-definition-efs-encryption-abilitato

• ecs-task-definition-linux-user-non-root

• ecs-task-definition-log-configuration

• ecs-task-definition-memory-hard-limit

• ecs-task-definition-network-mode-not-host

• ecs-task-definition-nonroot-user

• ecs-task-definition-pid-mode-check

• ecs-task-definition-user-for-host-mode-check

• ecs-task-definition-windows-user-non-admin

• efs-access-point-enforce-root-directory

• efs-access-point-enforce-user-identity

• efs-automatic-backups-abilitato

• efs-encrypted-check

• efs-filesystem-ct-crittografato

• etichettato con efs-file-system

• efs-in-backup-plan

• efs-last-backup-recovery-point-created

• efs-meets-restore-time-target

• efs-mount-target-accessibile al pubblico

• efs-resources-in-logicamente-air-gapped-vault

• efs-resources-protected-by-backup-plan

• eip-attached

• taggato con eks-addon

• eks-cluster-logging-enabled

• eks-cluster-log-enabled

• eks-cluster-oldest-supported-version

• eks-cluster-secrets-crittografato

• eks-cluster-supported-version

• eks-endpoint-no-public-access

• eks-fargate-profile-taggato

• controllo della versione supportata da eks-nodegroup-

• eks-secrets-encrypted

• abilitato per elasticache-automatic-backup-check

• elasticache-auto-minor-version-upgrade-check

• elasticache-rbac-auth-enabled

• elasticache-redis-cluster-automatic-backup-check

• elasticache-repl-grp-auto-failover-enabled

• elasticache-repl-grp-encrypted-at-rest

• elasticache-repl-grp-encrypted-in-transit

• elasticache-repl-grp-redis-auth-enabled

• elasticache-subnet-group-check

• elasticache-supported-engine-version

• elasticbeanstalk-descrizione dell'applicazione

• elasticbeanstalk-application-version-description

• elasticbeanstalk-environment-descrizione

• elasticsearch-encrypted-at-rest

• elasticsearch-in-vpc-only

• elasticsearch-logs-to-cloudwatch

• elasticsearch-node-to-node-encryption-check

• elastic-beanstalk-logs-to-cloudwatch

• elastic-beanstalk-managed-updates-enabled

• elbv2-acm-certificate-required

• elbv2-listener-encryption-in-transit

• elbv2-multiple-az

• elbv2-predefined-security-policy-ssl-check

• elbv2-targetgroup-healthcheck-protocol-encrypted

• elbv2-targetgroup-protocol-crittografato

• elb-acm-certificate-required

• elb-cross-zone-load-balancing-enabled

• elb-custom-security-policy-ssl-check

• elb-deletion-protection-enabled

• elb-internal-scheme-check

• elb-logging-enabled

• elb-predefined-security-policy-ssl-check

• etichettato con elb

• elb-tls-https-listeners-only

• emr-block-public-access

• emr-kerberos-enabled

• emr-master-no-public-ip

• emr-security-configuration-encryption-rest

• emr-security-configuration-encryption-transit

• encrypted-volumes

• eventschemas-discoverer-tagged

• eventschemas-registry-taggato

• event-data-store-cmk-encryption-enabled

• fis-experiment-template-log-configuration-exists

• taggato con fis-experiment-template-

• fms-shield-resource-policy-check

• fms-webacl-resource-policy-check

• fms-webacl-rulegroup-association-check

• fsx-last-backup-recovery-point-created

• fsx-lustre-copy-tags-to-backups

• fsx-meets-restore-time-target

• fsx-ontap-deployment-type-check

• fsx-openzfs-copy-tags-enabled

• fsx-openzfs-deployment-type-check

• fsx-resources-protected-by-backup-plan

• fsx-windows-audit-log-configured

• fsx-windows-deployment-type-check

• taggato con glb-listener

• etichettato con glb

• global-endpoint-event-replication-enabled

• glue-job-logging abilitato

• glue-ml-transform-criptato a riposo

• etichettato con glue-ml-transform-

• versione supportata da glue-spark-job

• guardduty-ec2-protezione-abilitata al runtime

• guardduty-ecs-protection-runtime-abilitato

• abilitata per guardduty-eks-protezione-audit-

• guardduty-eks-protezione-abilitato per il runtime

• guardduty-enabled-centralized

• abilitato alla protezione guardduty-lambda

• protezione da malware abilitata per guardduty

• guardduty-non-archived-findings

• protezione guardduty-rds abilitata

• abilitato per il monitoraggio del tempo di esecuzione di guardduty

• protezione abilitata per guardduty-s3

• iam-customer-policy-blocked-kms-actions

• abilitato per iam-external-access-analyzer

• iam-group-has-users-check

• iam-inline-policy-blocked-kms-actions

• iam-no-inline-policy-check

• iam-password-policy

• iam-policy-blacklisted-check

• descrizione della politica di iam-

• iam-policy-in-use

• iam-policy-no-statements-with-admin-access

• iam-policy-no-statements-with-full-access

• iam-role-managed-policy-check

• iam-root-access-key-check

• iam-user-group-membership-check

• iam-user-mfa-enabled

• iam-user-no-policies-check

• iam-user-unused-credentials-check

• imagebuilder-distributionconfiguration-taggato

• taggato con imagebuilder-imagepipeline

• imagebuilder-imagerecipe-ebs-volumes-crittografato

• taggato con imagebuilder-imagerecipe-

• imagebuilder-infrastructureconfiguration-taggato

• incoming-ssh-disabled

• abilitato per inspector-ec2-scan

• abilitato per inspector-ecr-scan

• abilitato per la scansione standard inspector-lambda

• instances-in-vpc

• internet-gateway-authorized-vpc-only

• iotdevicedefender-custom-metric-taggato

• iot-authorizer-token-signing-abilitato

• template-taggato con iot-job-

• descrizione del modello di provisioning iot

• iot-provisioning-template-jitp

• template con tag iot-provisioning-

• contrassegnato con iot-scheduled-audit-

• kinesis-firehose-delivery-stream crittografato

• kinesis-stream-backup-retention-check

• kinesis-stream-encrypted

• kms-cmk-not-scheduled-for-deletion

• kms-key-policy-no-public-access

• kms-key-taggato

• lambda-concurrency-check

• lambda-dlq-check

• funzione lambda-application-log-level-check

• descrizione della funzione lambda

• funzione-lambda-log-format-json

• lambda-function-public-access-prohibited

• lambda-function-settings-check

• funzione lambda-system-log-level-check

• funzione lambda-abilitata per xray

• lambda-inside-vpc

• lambda-vpc-multi-az-check

• macie-auto-sensitive-data-discovery-check

• macie-status-check

• mariadb-publish-logs-to-cloudwatch-logs

• pacchetto multimediale con tag di configurazione del pacchetto

• memorydb-subnetgroup-taggato

• mfa-enabled-for-iam-console-access

• autenticazione mq-active-broker-ldap

• mq-active-deployment-mode

• mq-active-single-instance-broker-storage-type-efs

• mq-automatic-minor-version-upgrade-enabled

• mq-auto-minor-version-upgrade-enabled

• mq-broker-general-logging abilitato

• mq-cloudwatch-audit-logging-enabled

• abilitato per mq-cloudwatch-audit-log

• mq-no-public-access

• mq-rabbit-deployment-mode

• msk-cluster-public-access-disabilitato

• contrassegnato con msk-cluster-

• msk-connect-connector-logging-abilitato

• msk-enhanced-monitoring-enabled

• msk-in-cluster-node-require-tls

• msk-unrestricted-access-check

• multi-region-cloud-trail-enabled

• nacl-no-unrestricted-ssh-rdp

• neptune-cluster-backup-retention-check

• neptune-cluster-cloudwatch-log-export-enabled

• neptune-cluster-copy-tags-to-snapshot-enabled

• neptune-cluster-deletion-protection-enabled

• neptune-cluster-encrypted

• neptune-cluster-iam-database-authentication

• neptune-cluster-multi-az-enabled

• neptune-cluster-snapshot-encrypted

• neptune-cluster-snapshot-iam-database-auth-abilitato

• neptune-cluster-snapshot-public-prohibited

• netfw-deletion-protection-enabled

• netfw-logging-enabled

• netfw-multi-az-enabled

• netfw-policy-default-action-fragment-packets

• netfw-policy-default-action-full-packets

• netfw-policy-rule-group-associated

• netfw-stateless-rule-group-not-empty

• abilitato alla protezione netfw-subnet-change-

• nlb-cross-zone-load-balancing-enabled

• nlb-internal-scheme-check

• etichettato con nlb-listener

• nlb-logging abilitato

• etichettato nlb

• no-unrestricted-route-to-igw

• opensearch-access-control-enabled

• opensearch-audit-logging-enabled

• opensearch-data-node-fault-tolerance

• opensearch-encrypted-at-rest

• opensearch-https-required

• opensearch-in-vpc-only

• opensearch-logs-to-cloudwatch

• opensearch-node-to-node-encryption-check

• opensearch-primary-node-fault-tolerance

• opensearch-update-check

• versione-supportata da rabbit-mq

• rds-aurora-mysql-audit-logging-enabled

• rds-aurora-postgresql-logs-to-cloudwatch

• rds-automatic-minor-version-upgrade-enabled

• rds-cluster-backup-retention-check

• rds-cluster-default-admin-check

• rds-cluster-deletion-protection-enabled

• rds-cluster-encrypted-at-rest

• rds-cluster-iam-authentication-enabled

• rds-cluster-multi-az-enabled

• rds-db-security-group-not-allowed

• rds-enhanced-monitoring-enabled

• rds-event-subscription-taggato

• versione-supportata da rds-global-cluster-aurora-mysql

• rds-instance-default-admin-check

• rds-instance-deletion-protection-enabled

• rds-instance-iam-authentication-enabled

• rds-instance-public-access-check

• rds-instance-subnet-igw-check

• rds-in-backup-plan

• rds-last-backup-recovery-point-created

• rds-logging-enabled

• rds-mariadb-instance-crittografata-in-transito

• rds-meets-restore-time-target

• rds-multi-az-support

• rds-mysql-instance-crittografata-in-transito

• rds-option-group-taggato

• rds-postgresql-logs-to-cloudwatch

• istanza rds-postgres-crittografata in transito

• crittografia rds-proxy-tls

• rds-resources-protected-by-backup-plan

• rds-snapshots-public-prohibited

• rds-snapshot-encrypted

• rds-sqlserver-crittografato in transito

• rds-sql-server-logs-to-cloudwatch

• rds-storage-encrypted

• redshift-audit-logging-enabled

• redshift-backup-enabled

• redshift-cluster-configuration-check

• redshift-cluster-kms-enabled

• redshift-cluster-maintenancesettings-check

• taggato con redshift-cluster-parameter-group-

• redshift-cluster-public-access-check

• redshift-cluster-subnet-group-multi-az

• redshift-default-admin-check

• redshift-default-db-name-check

• redshift-enhanced-vpc-routing-enabled

• redshift-require-tls-ssl

• redshift-serverless-default-admin-check

• redshift-serverless-default-db-name-check

• crittografia cmk-redshift-serverless-namespace-

• redshift-serverless-publish-logs-to-cloudwatch

• redshift-serverless-workgroup-crittografato in transito

• redshift-serverless-workgroup-no-accesso pubblico

• redshift-serverless-workgroup-routes-within-vpc

• accesso illimitato alla porta redshift

• required-tags

• etichettato con resiliencehub-app

• resiliencehub-resiliencypolicy-taggato

• restricted-incoming-traffic

• root-account-hardware-mfa-enabled

• root-account-mfa-enabled

• route53-resolver-firewall-domain-list-taggato

• taggato con route53-resolver-firewall-rule-group-association-

• taggato con route53-resolver-firewall-rule-group-

• etichettato con route53-resolver-resolver-endpoint

• etichettato con route53-resolver-resolver-rule-

• rum-app-monitor-cloudwatch-logs-abilitato

• taggato con rum-app-monitor-

• s3-access-point-in-vpc-only

• s3-access-point-public-access-blocks

• s3-account-level-public-access-blocks

• s3-account-level-public-access-blocks-periodic

• s3-bucket-acl-prohibited

• s3-bucket-blacklisted-actions-prohibited

• s3-bucket abilitato per la replica tra regioni

• s3-bucket-default-lock-enabled

• s3-bucket-level-public-access-prohibited

• s3-bucket-logging-enabled

• s3-bucket-mfa-delete-enabled

• s3-bucket-policy-grantee-check

• s3-bucket-policy-not-more-permissive

• s3-bucket-public-read-prohibited

• s3-bucket-public-write-prohibited

• s3-bucket-replication-enabled

• s3-bucket-server-side-encryption-enabled

• s3-bucket-ssl-requests-only

• etichettato con s3-bucket

• s3-bucket-versioning-enabled

• s3-default-encryption-kms

• s3-event-notifications-enabled

• s3-last-backup-recovery-point-created

• s3-lifecycle-policy-check

• s3-meets-restore-time-target

• risorse s3-in un vault logicamente aria-gappato

• s3-resources-protected-by-backup-plan

• s3-version-lifecycle-policy-check

• taggato con sagemaker-app-image-config-

• sagemaker-data-quality-job-encrypt-in-transit

• sagemaker-data-quality-job-isolation

• dominio-sagemaker-in-vpc

• taggato con dominio sagemaker

• sagemaker-endpoint-configuration-kms-key-configured

• sagemaker-endpoint-config-kms-key-required

• sagemaker-endpoint-config-prod-instance-count

• sagemaker-featuregroup-description

• sagemaker-featuregroup-encryption-at-rest

• crittografia sagemaker-featuregroup-online-store-

• taggato con sagemaker-feature-group

• descrizione dell'immagine con sagemaker

• taggato con sagemaker

• taggato con sagemaker inferenceexperiment-

• sagemaker-inf-experiment-data-storage-kms-crittografato

• sagemaker-inf-experiment-instance-storage-kms-crittografato

• sagemaker-model-bias-job-encrypt-in-transit

• sagemaker-model-bias-job-isolation

• sagemaker-model-explainability-job-encrypt-in-transit

• sagemaker-model-explainability-job-network-isolation

• modello-sagemaker-in-vpc

• abilitato all'isolamento del modello sagemaker

• registro privato sagemaker-model-multicontainer-

• sagemaker-model-private-registry-obbligatorio

• sagemaker-model-quality-job-definition-isolation

• sagemaker-model-quality-job-encrypt-in-transit

• sagemaker-monitoring-schedule-isolation

• sagemaker-monitoring-schedule-traffic-encryption

• sagemaker-notebook-instance-inside-vpc

• sagemaker-notebook-instance-kms-key-configured

• versione-della-platform-sagemaker-notebook-instance-

• sagemaker-notebook-instance-root-access-check

• sagemaker-notebook-instance-storage-vol-kms-crittografata

• sagemaker-notebook-no-direct-internet-access

• secretsmanager-rotation-enabled-check

• secretsmanager-scheduled-rotation-success-check

• secretsmanager-secret-periodic-rotation

• secretsmanager-secret-unused

• secretsmanager-using-cmk

• securityhub-enabled

• security-account-information-provided

• service-catalog-portfolio-taggato

• catalogo-di-servizi-condiviso all'interno dell'organizzazione

• service-vpc-endpoint-enabled

• ses-sending-tls-required

• signer-signingprofile - taggato

• sns-encrypted-kms

• sns-topic-message-delivery-notification-enabled

• sns-topic-nessun accesso pubblico

• sqs-queue-dlq-check

• sqs-queue-senza accesso pubblico

• sqs-queue-policy-controllo di accesso completo

• ssm-automation-block-public-sharing

• ssm-automation-logging abilitato

• ssm-document-not-public

• con tag ssm-document

• stepfunctions-state-machine-taggato

• step-functions-state-machine-logging-enabled

• storagegateway-last-backup-recovery-point-created

• risorse-di-storagegateway-in-logicamente-air-gapped-vault

• storagegateway-resources-protected-by-backup-plan

• subnet-auto-assign-public-ip-disabled

• descrizione del contratto di trasferimento

• contratto di trasferimento etichettato

• descrizione del certificato di trasferimento

• certificato di trasferimento etichettato

• transfer-connector-as2-encryption-algorithm-check

• transfer-connector-as2-mdn-signing-algorithm-check

• transfer-connector-as2-signing-algorithm-check

• transfer-connector-logging-abilitato

• transfer-connector-taggato

• transfer-family-server-no-ftp

• transfer-profile-taggato

• descrizione del flusso di lavoro di trasferimento

• transfer-workflow-taggato

• virtualmachine-last-backup-recovery-point-created

• risorse della macchina virtuale in un vault logicamente airgapped

• virtualmachine-resources-protected-by-backup-plan

• vpc-default-security-group-closed

• abilitato per vpc-endpoint

• vpc-flow-logs-enabled

• vpc-network-acl-unused-check

• vpc-peering-dns-resolution-check

• vpc-sg-open-only-to-authorized-ports

• vpc-sg-port-restriction-check

• vpc-vpn-2-tunnels-up

• wafv2-logging-enabled

• wafv2-rulegroup-logging-enabled

• wafv2-rulegroup-not-empty

• wafv2-webacl-not-empty

• waf-regional-rulegroup-not-empty

• waf-regional-rule-not-empty

• waf-regional-webacl-not-empty

• access-keys-rotated

• account-part-of-organizations

• con tag acmpca-certificate-authority-

• acm-certificate-expiration-check

• acm-certificate-rsa-check

• acm-certificate-transparent-logging-abilitata

• acm-pca-root-ca-disabled

• versione supportata da active-mq-

• alb-desync-mode-check

• alb-http-drop-invalid-header-enabled

• alb-http-to-https-redirection-check

• alb-internal-scheme-check

• etichettato con alb-listener

• etichettato con alb-tag

• alb-waf-enabled

• amplify-app-branch-abilitato alla cancellazione automatica

• amplify-app-build-spec-configurato

• descrizione dell'app amplifica

• amplify-app-no-variabili di ambiente

• amplify-app-platform-check

• etichettato con amplify-app

• abilitato per amplify-branch-auto-build

• amplify-branch-build-spec-configurato

• amplify-branch-descrizione

• amplify-branch-framework configurato

• abilitato per la modalità amplify-branch-performance

• abilitato per amplify-branch-pull-request-preview-

• etichettato con amplify-branch

• apigatewayv2-integration-private-https-abilitato

• apigatewayv2-stage-descrizione

• nome-dominio-apigateway-tls-check

• apigateway-stage-access-logs-abilitato

• apigateway-stage-descrizione

• api-gwv2-access-logs-enabled

• api-gwv2-authorization-type-configured

• api-gwv2-stage-default-route-detailed-metrics-abilitato

• api-gw-associated-with-waf

• api-gw-cache-enabled-and-encrypted

• api-gw-endpoint-type-check

• api-gw-execution-logging-enabled

• api-gw-rest-api-contrassegnato

• api-gw-ssl-enabled

• etichettato con api-gw-stage-

• api-gw-xray-enabled

• descrizione dell'applicazione appconfigg

• appconfig-application-tagged

• appconfig-configuration-profile-taggato

• appconfig-configuration-profile-validators-non-empty

• descrizione della strategia di distribuzione di appconfig-deployment

• appconfig-deployment-strategy-time-final-bake-time

• appconfig-deployment-strategy-replicate-to-ssm

• etichettato con appconfig-deployment-strategy-

• descrizione dell'ambiente di appconfig

• etichettato con appconfig-environment

• appconfig-extension-association-tagged

• appconfig-freeform-profile-config-storage

• descrizione della versione di appconfig-hosted-configuration-

• taggato con appflow-flow

• appflow-flow-trigger-type-check

• appintegrations-application-approved-origins-check

• appintegrations-application-taggato

• appintegrations-event-integration-description

• appintegrations-event-integration-taggato

• appmesh-gateway-route-taggato

• appmesh-mesh-deny-tcp-forwarding

• appmesh-mesh-ip-pref-check

• taggato con appmesh-mesh

• appmesh-route-taggato

• appmesh-virtual-gateway-backend-defaults-tls

• appmesh-virtual-gateway-listeners-health-check-abilitato

• appmesh-virtual-gateway-logging-file-path-exists

• taggato con appmesh-virtual-gateway-

• appmesh-virtual-node-backend-defaults-tls-on

• appmesh-virtual-node-cloud-map-ip-pref-check

• appmesh-virtual-node-dns-ip-pref-check

• appmesh-virtual-node-listeners-health-check-abilitato

• appmesh-virtual-node-listeners-outlier-detect-abilitato

• appmesh-virtual-node-logging-file-path-exists

• appmesh-virtual-node-service-backends-tls-enforced

• taggato con appmesh-virtual-node

• taggato con appmesh-virtual-router

• appmesh-virtual-service-taggato

• approved-amis-by-id

• approved-amis-by-tag

• servizio-apprunner-in-vpc

• applunner-service-ip-address-type-check

• apprunner-service-max-unhealthy-threshold

• apprunner-service-no-public access

• apprunner-service-ability-enabled

• apprunner-service-taggato

• apprunner-vpc-connector-taggato

• flotta-appstream-in-vpc

• appsync-associated-with-waf

• appsync-authorization-check

• appsync-cache-encryption-at-rest

• abilitato per appsync-graphql-api-xray

• appsync-logging-enabled

• etichettato con aps-rule-groups-namespace

• descrizione del catalogo dei dati di athena

• descrizione della dichiarazione preparata da athena

• descrizione del gruppo di lavoro athena

• athena-workgroup-encrypted-at-rest

• athena-workgroup-enforce-workgroup-configuration

• athena-workgroup-engine-version-auto-upgrade

• athena-workgroup-logging-abilitato

• auditmanager-assessment-taggato

• aurora-global-database-encryption-at-rest

• aurora-last-backup-recovery-point-created

• aurora-meets-restore-time-target

• aurora-mysql-backtracking-enabled

• aurora-mysql-cluster-audit-logging

• aurora-risorse-in-logicamente-air-gapped-vault

• aurora-resources-protected-by-backup-plan

• autoscaling-capacity-rebalancing

• autoscaling-group-elb-healthcheck-required

• autoscaling-launchconfig-requires-imdsv2

• autoscaling-launch-config-hop-limit

• autoscaling-launch-config-public-ip-disabled

• autoscaling-launch-template

• autoscaling-multiple-az

• autoscaling-multiple-instance-types

• backup-plan-min-frequency-and-min-retention-check

• backup-recovery-point-encrypted

• backup-recovery-point-manual-deletion-disabled

• backup-recovery-point-minimum-retention-check

• abilitato per l'ambiente di elaborazione in batch

• ambiente di elaborazione in batch gestito

• etichettato in ambiente di calcolo in batch

• abilitato alla coda di lavoro in modalità batch-job-

• taggato batch-job-queue-

• ambiente di calcolo gestito in batch utilizzando un modello di avvio

• controllo della strategia di allocazione dell'ambiente di calcolo gestito in batch

• batch-managed-compute-env-compute-resources-taggato

• spot-compute-environment-max-bid gestito in batch

• etichettato con politica di pianificazione dei lotti

• beanstalk-enhanced-health-reporting-enabled

• bedrockagentcore-codeinterpreter-networkmode-check

• bedrockagentcore-gateway-authorizer-abilitato

• bedrockagentcore-runtime-private-network-required

• abilitato alla crittografia bedrock-data-source

• taggato con cassandra-keyspace

• clb-desync-mode-check

• clb-multiple-az

• cloudformation-stack-drift-detection-check

• cloudformation-stack-notification-check

• cloudformation-stack-service-role-check

• cloudformation-termination-protection-check

• cloudtrail-all-read-s3-data-event-check

• cloudtrail-all-write-s3-data-event-check

• cloudtrail-event-data-store-multi-regione

• registrazione degli accessi a cloudtrail-s3-bucket-

• cloudtrail-s3-bucket-accesso pubblico vietato

• cloudtrail-s3-dataevents-enabled

• cloudtrail-security-trail-enabled

• cloudwatch-alarm-action-check

• cloudwatch-alarm-action-enabled-check

• descrizione di cloudwatch-alarm-

• cloudwatch-alarm-resource-check

• cloudwatch-alarm-settings-check

• cloudwatch-log-group-encrypted

• taggato con cloudwatch-metric-stream

• cloud-trail-cloud-watch-logs-enabled

• cloud-trail-enabled

• cloud-trail-encryption-enabled

• cloud-trail-log-file-validation-enabled

• cmk-backing-key-rotation-enabled

• codiceartifact-repository-taggato

• codebuild-project-artifact-encryption

• codebuild-project-environment-privileged-check

• codebuild-project-envvar-awscred-check

• codebuild-project-logging-enabled

• codebuild-project-s3-logs-encrypted

• codebuild-project-source-repo-url-check

• codificato con codebuild-project

• codebuild-report-group-crittografato a riposo

• etichettato con codebuild-report-group-

• codedeploy-auto-rollback-monitor-enabled

• codedeploy-deployment-group-abilitato per il rollback automatico

• codedeploy-deployment-group-outdated-instances-update

• codedeploy-ec2-minimum-healthy-hosts-configured

• codedeploy-lambda-allatonce-traffic-shift-disabled

• codeguruprofiler-profiling-group-taggato

• codegurureviewer-repository-association-tagged

• codepipeline-deployment-count-check

• codepipeline-region-fanout-check

• cognito-identity-pool-accessi non autenticati

• cognito-identity-pool-unauth-access-check

• cognito-userpool-cust-auth-threat-fullcheck

• abilitata alla sicurezza avanzata con cognito-user-pool-

• abilitata la protezione da eliminazione del pool di utenti cognito

• abilitato per cognito-user-pool-mfa

• controllo della politica del pool di utenti cognito

• taggato con cognito-user-pool-

• abilitata la registrazione delle istanze di connessione

• profili clienti con tag di dominio

• customerprofiles-object-type-allow-profile-creation

• customerprofiles-object-type-tagged

• custom-eventbus-policy-attached

• custom-schema-registry-policy-attached

• cw-loggroup-retention-period-check

• datasync-location-object-storage-using-https

• datasync-task-data-verifica-abilitata

• datasync-task-logging-abilitato

• etichettato con datasync-task-

• dax-encryption-enabled

• crittografia dax-tls-endpoint

• db-instance-backup-enabled

• desired-instance-tenancy

• desired-instance-type

• devicefarm-instance-profile-taggato

• contrassegnato con devicefarm-project

• etichettato con devicefarm-test-grid-project-

• dms-auto-minor-version-upgrade-check

• dms-endpoint-ssl-configured

• contrassegnato con dms-endpoint

• dms-mongo-db-autenticazione abilitata

• dms-neptune-iam-autorizzazione-abilitata

• dms-redis-tls-abilitato

• istanza di replica dms-multiaz abilitata

• dms-replication-not-public

• dms-replication-task-sourcedb-logging

• contrassegnato con dms-replication-task-

• dms-replication-task-targetdb-logging

• docdb-cluster-audit-logging-enabled

• docdb-cluster-backup-retention-check

• docdb-cluster-deletion-protection-enabled

• docdb-cluster-encrypted

• docdb-cluster-crittografato in transito

• docdb-cluster-snapshot-public-prohibited

• dynamodb-autoscaling-enabled

• dynamodb-in-backup-plan

• dynamodb-last-backup-recovery-point-created

• dynamodb-meets-restore-time-target

• dynamodb-pitr-enabled

• dynamodb-resources-protected-by-backup-plan

• dynamodb-table-deletion-protection-enabled

• dynamodb-table-encrypted-kms

• dynamodb-table-encryption-enabled

• dynamodb-throughput-limit-check

• ebs-in-backup-plan

• ebs-last-backup-recovery-point-created

• ebs-meets-restore-time-target

• ebs-optimized-instance

• ebs-resources-in-logicamente-air-gapped-vault

• ebs-resources-protected-by-backup-plan

• ebs-snapshot-block-accesso pubblico

• ebs-snapshot-public-restorable-check

• contrassegnato con ec2-capacity-reservation-

• etichettato con ec2-carrier-gateway-

• ec2-client-vpn-connection-log-enabled

• contrassegnato con ec2-client-vpn-endpoint

• ec2-client-vpn-not-authorize-all

• ec2-dhcp-options-taggato

• ec2-ebs-encryption-by-default

• ec2-enis-source-destination-check-abilitato

• contrassegnato con ec2-fleet

• ec2-imdsv2-check

• ec2-instance-detailed-monitoring-enabled

• istanza ec2-lanciata-con-ami-consentito-

• ec2-instance-managed-by-ssm

• ec2-instance-multiple-eni-check

• ec2-instance-no-public-ip

• ec2-instance-profile-attached

• contrassegnato con ec2-ipamscope

• ec2-last-backup-recovery-point-created

• ec2-launchtemplate-ebs-encrypted

• ec2-launch-templates-ebs-volume-crittografato

• ec2-launch-template-imdsv2-check

• ec2-launch-template-public-ip-disabled

• ec2-launch-template-taggato

• ec2-managedinstance-applications-blacklisted

• ec2-managedinstance-applications-required

• ec2-managedinstance-association-compliance-status-check

• ec2-managedinstance-inventory-blacklisted

• ec2-managedinstance-patch-compliance-status-check

• ec2-managedinstance-platform-check

• ec2-meets-restore-time-target

• ec2-network-insights-access-scope-analysis-taggato

• contrassegnato con ec2-network-insights-access-scope-taggato

• ec2-network-insights-analysis-taggato

• contrassegnato con ec2-network-insights-path-

• ec2-no-amazon-key-pair

• ec2-paravirtual-instance-check

• ec2-prefix-list-taggato

• ec2-resources-in-logicamente-air-gapped-vault

• ec2-resources-protected-by-backup-plan

• ec2-security-group-attached-to-eni

• ec2-security-group-attached-to-eni-periodic

• ec2-spot-fleet-request-ct-encryption-at-rest

• ec2-stopped-instance

• ec2-token-hop-limit-check

• descrizione del filtro ec2-traffic-mirror-

• ec2-traffic-mirror-filter-taggato

• descrizione della sessione ec2-traffic-mirror-

• ec2-traffic-mirror-session-taggato

• descrizione di ec2-traffic-mirror-target-

• contrassegnato con ec2-traffic-mirror-target-

• ec2-transit-gateway-auto-vpc-attach-disabled

• ec2-transit-gateway-multicast-domain-taggato

• ec2-volume-inuse-check

• connessione ec2-vpn-ike-version-check

• ec2-vpn-connection-logging abilitato

• ec2-vpn-connection-taggato

• ecr-private-image-scanning-enabled

• ecr-private-lifecycle-policy-configured

• ecr-private-tag-immutability-enabled

• ecr-repository-cmk-encryption-enabled

• contrassegnato con ecr-repository-

• ecs-awsvpc-networking-enabled

• etichettato con ecs-capacity-provider-

• ecs-capacity-provider-termination-check

• ecs-containers-nonprivileged

• ecs-containers-readonly-access

• ecs-container-insights-enabled

• ecs-fargate-latest-platform-version

• ecs-no-environment-secrets

• ecs-service-propagate-tags-abilitato

• ecs-task-definition-efs-encryption-abilitato

• ecs-task-definition-linux-user-non-root

• ecs-task-definition-log-configuration

• ecs-task-definition-memory-hard-limit

• ecs-task-definition-network-mode-not-host

• ecs-task-definition-nonroot-user

• ecs-task-definition-pid-mode-check

• ecs-task-definition-user-for-host-mode-check

• ecs-task-definition-windows-user-non-admin

• efs-access-point-enforce-root-directory

• efs-access-point-enforce-user-identity

• efs-automatic-backups-abilitato

• efs-encrypted-check

• efs-filesystem-ct-crittografato

• etichettato con efs-file-system

• efs-in-backup-plan

• efs-last-backup-recovery-point-created

• efs-meets-restore-time-target

• efs-mount-target-accessibile al pubblico

• efs-resources-in-logicamente-air-gapped-vault

• efs-resources-protected-by-backup-plan

• eip-attached

• taggato con eks-addon

• eks-cluster-logging-enabled

• eks-cluster-log-enabled

• eks-cluster-oldest-supported-version

• eks-cluster-secrets-crittografato

• eks-cluster-supported-version

• eks-endpoint-no-public-access

• eks-fargate-profile-taggato

• controllo della versione supportata da eks-nodegroup-

• eks-secrets-encrypted

• abilitato per elasticache-automatic-backup-check

• elasticache-auto-minor-version-upgrade-check

• elasticache-rbac-auth-enabled

• elasticache-redis-cluster-automatic-backup-check

• elasticache-repl-grp-auto-failover-enabled

• elasticache-repl-grp-encrypted-at-rest

• elasticache-repl-grp-encrypted-in-transit

• elasticache-repl-grp-redis-auth-enabled

• elasticache-subnet-group-check

• elasticache-supported-engine-version

• elasticbeanstalk-descrizione dell'applicazione

• elasticbeanstalk-application-version-description

• elasticbeanstalk-environment-descrizione

• elasticsearch-encrypted-at-rest

• elasticsearch-in-vpc-only

• elasticsearch-logs-to-cloudwatch

• elasticsearch-node-to-node-encryption-check

• elastic-beanstalk-logs-to-cloudwatch

• elastic-beanstalk-managed-updates-enabled

• elbv2-acm-certificate-required

• elbv2-listener-encryption-in-transit

• elbv2-multiple-az

• elbv2-predefined-security-policy-ssl-check

• elbv2-targetgroup-healthcheck-protocol-encrypted

• elbv2-targetgroup-protocol-crittografato

• elb-acm-certificate-required

• elb-cross-zone-load-balancing-enabled

• elb-custom-security-policy-ssl-check

• elb-deletion-protection-enabled

• elb-internal-scheme-check

• elb-logging-enabled

• elb-predefined-security-policy-ssl-check

• etichettato con elb

• elb-tls-https-listeners-only

• emr-block-public-access

• emr-kerberos-enabled

• emr-master-no-public-ip

• emr-security-configuration-encryption-rest

• emr-security-configuration-encryption-transit

• encrypted-volumes

• eventschemas-discoverer-tagged

• eventschemas-registry-taggato

• event-data-store-cmk-encryption-enabled

• evidentemente la descrizione del lancio

• evidentemente taggato dal lancio

• evidentemente descrizione del progetto

• evidentemente etichettato come progetto

• evidentemente descrizione del segmento

• evidentemente etichettata per segmenti

• fis-experiment-template-log-configuration-exists

• taggato con fis-experiment-template-

• fms-shield-resource-policy-check

• fms-webacl-resource-policy-check

• fms-webacl-rulegroup-association-check

• frauddetector-entity-type-tagged

• frauddetector-label-tagged

• frauddetector-outcome-taggato

• frauddetector-variable-tagged

• fsx-last-backup-recovery-point-created

• fsx-lustre-copy-tags-to-backups

• fsx-meets-restore-time-target

• fsx-ontap-deployment-type-check

• fsx-openzfs-copy-tags-enabled

• fsx-openzfs-deployment-type-check

• fsx-resources-protected-by-backup-plan

• fsx-windows-audit-log-configured

• fsx-windows-deployment-type-check

• taggato con glb-listener

• etichettato con glb

• global-endpoint-event-replication-enabled

• glue-job-logging abilitato

• glue-ml-transform-criptato a riposo

• etichettato con glue-ml-transform-

• versione supportata da glue-spark-job

• groundstation-config-taggato

• groundstation-dataflowendpointgroup-taggato

• groundstation-mission profil-taggato

• guardduty-ec2-protezione-abilitato per il runtime

• guardduty-ecs-protection-runtime-abilitato

• abilitata per guardduty-eks-protezione-audit-

• guardduty-eks-protezione-abilitato per il runtime

• guardduty-enabled-centralized

• abilitato alla protezione guardduty-lambda

• protezione da malware abilitata per guardduty

• guardduty-non-archived-findings

• protezione guardduty-rds abilitata

• abilitato per il monitoraggio del tempo di esecuzione di guardduty

• protezione abilitata per guardduty-s3

• etichettato con healthlake-fhirdatastore

• iam-customer-policy-blocked-kms-actions

• abilitato per iam-external-access-analyzer

• iam-group-has-users-check

• iam-inline-policy-blocked-kms-actions

• iam-no-inline-policy-check

• iam-password-policy

• iam-policy-blacklisted-check

• descrizione della politica di iam-

• iam-policy-in-use

• iam-policy-no-statements-with-admin-access

• iam-policy-no-statements-with-full-access

• iam-role-managed-policy-check

• iam-root-access-key-check

• iam-user-group-membership-check

• iam-user-mfa-enabled

• iam-user-no-policies-check

• iam-user-unused-credentials-check

• imagebuilder-distributionconfiguration-taggato

• taggato con imagebuilder-imagepipeline

• imagebuilder-imagerecipe-ebs-volumes-crittografato

• taggato con imagebuilder-imagerecipe-

• imagebuilder-infrastructureconfiguration-taggato

• incoming-ssh-disabled

• abilitato per inspector-ec2-scan

• abilitato per inspector-ecr-scan

• abilitato per la scansione del codice lambda con inspector-lambda

• abilitato per inspector-lambda-standard-scan

• instances-in-vpc

• internet-gateway-authorized-vpc-only

• iotdevicedefender-custom-metric-taggato

• iotevents-alarm-model-taggato

• etichettato con iotevents-detector-model

• iotevents-input-taggato

• taggato con iotsitewise-asset-model

• taggato con iotsitewise-dashboard

• taggato con iotsitewise-gateway

• taggato con iotsitewise-portal

• taggato con iotsitewise-project

• tipo-componente con tag iottwinmaker-

• taggato con entità iottwinmaker

• taggato con iottwinmaker-scene

• taggato con iottwinmaker-sync-job-

• taggato con iottwinmaker-workspace

• contrassegnato con iotwireless-fuota-task-

• contrassegnato con iotwireless-multicast-group

• con tag iotwireless-service-profile-

• iot-authorizer-token-signing-abilitato

• template-taggato con iot-job-

• descrizione del modello di provisioning iot

• iot-provisioning-template-jitp

• template con tag iot-provisioning-

• contrassegnato con iot-scheduled-audit-

• ivs-channel-playback-authorization-enabled

• contrassegnato con ivs-channel

• ivs-playback-keypair-taggato

• contrassegnato con tag ivs-recording-configuration-

• contrassegnato con kendra-index-

• taggato nel canale di segnalazione video kinesis

• taggato con kinesisvideo-stream

• kinesis-firehose-delivery-stream crittografato

• kinesis-stream-backup-retention-check

• kinesis-stream-encrypted

• kinesis-video-stream-minima-conservazione dei dati

• kms-cmk-not-scheduled-for-deletion

• kms-key-policy-no-public-access

• kms-key-taggato

• lambda-concurrency-check

• lambda-dlq-check

• funzione lambda-application-log-level-check

• descrizione della funzione lambda

• funzione-lambda-log-format-json

• lambda-function-public-access-prohibited

• lambda-function-settings-check

• funzione lambda-system-log-level-check

• funzione lambda-abilitata per xray

• lambda-inside-vpc

• lambda-vpc-multi-az-check

• lightsail-bucket-allow-public-overrides-disabilitato

• lightsail-bucket-object-versioning-abilitato

• etichettato con lightsail-bucket

• etichettato con certificato lightsailer

• etichettato con lightsail-disk

• macie-auto-sensitive-data-discovery-check

• macie-status-check

• mariadb-publish-logs-to-cloudwatch-logs

• pacchetto multimediale con tag di configurazione del pacchetto

• mediatailor-playbackconfiguration-taggato

• taggato con memorydb-subnetgroup

• mfa-enabled-for-iam-console-access

• autenticazione mq-active-broker-ldap

• mq-active-deployment-mode

• mq-active-single-instance-broker-storage-type-efs

• mq-automatic-minor-version-upgrade-enabled

• mq-auto-minor-version-upgrade-enabled

• mq-broker-general-logging abilitato

• mq-cloudwatch-audit-logging-enabled

• abilitato per mq-cloudwatch-audit-log

• mq-no-public-access

• mq-rabbit-deployment-mode

• msk-cluster-public-access-disabilitato

• contrassegnato con msk-cluster-

• msk-connect-connector-logging-abilitato

• msk-enhanced-monitoring-enabled

• msk-in-cluster-node-require-tls

• msk-unrestricted-access-check

• multi-region-cloud-trail-enabled

• nacl-no-unrestricted-ssh-rdp

• neptune-cluster-backup-retention-check

• neptune-cluster-cloudwatch-log-export-enabled

• neptune-cluster-copy-tags-to-snapshot-enabled

• neptune-cluster-deletion-protection-enabled

• neptune-cluster-encrypted

• neptune-cluster-iam-database-authentication

• neptune-cluster-multi-az-enabled

• neptune-cluster-snapshot-encrypted

• neptune-cluster-snapshot-iam-database-auth-abilitato

• neptune-cluster-snapshot-public-prohibited

• netfw-deletion-protection-enabled

• netfw-logging-enabled

• netfw-multi-az-enabled

• netfw-policy-default-action-fragment-packets

• netfw-policy-default-action-full-packets

• netfw-policy-rule-group-associated

• netfw-stateless-rule-group-not-empty

• abilitato alla protezione netfw-subnet-change-

• nlb-cross-zone-load-balancing-enabled

• nlb-internal-scheme-check

• etichettato con nlb-listener

• nlb-logging abilitato

• etichettato nlb

• no-unrestricted-route-to-igw

• opensearchserverless-collection-description

• opensearchserverless-collection-standbyreplicas-enabled

• opensearch-access-control-enabled

• opensearch-audit-logging-enabled

• opensearch-data-node-fault-tolerance

• opensearch-encrypted-at-rest

• opensearch-https-required

• opensearch-in-vpc-only

• opensearch-logs-to-cloudwatch

• opensearch-node-to-node-encryption-check

• opensearch-primary-node-fault-tolerance

• opensearch-update-check

• pacchetto panorama-taggato

• versione supportata da rabbit-mq

• rds-aurora-mysql-audit-logging-enabled

• rds-aurora-postgresql-logs-to-cloudwatch

• rds-automatic-minor-version-upgrade-enabled

• rds-cluster-auto-minor-version-upgrade-enable

• rds-cluster-backup-retention-check

• rds-cluster-default-admin-check

• rds-cluster-deletion-protection-enabled

• rds-cluster-encrypted-at-rest

• rds-cluster-iam-authentication-enabled

• rds-cluster-multi-az-enabled

• rds-db-security-group-not-allowed

• rds-enhanced-monitoring-enabled

• rds-event-subscription-taggato

• versione-supportata da rds-global-cluster-aurora-mysql

• rds-instance-default-admin-check

• rds-instance-deletion-protection-enabled

• rds-instance-iam-authentication-enabled

• rds-instance-public-access-check

• rds-instance-subnet-igw-check

• rds-in-backup-plan

• rds-last-backup-recovery-point-created

• rds-logging-enabled

• rds-mariadb-instance-crittografata-in-transito

• rds-meets-restore-time-target

• rds-multi-az-support

• rds-mysql-cluster-copy-tags-to-snapshot-check

• rds-mysql-instance-crittografata-in-transito

• rds-option-group-taggato

• rds-pgsql-cluster-copy-tags-to-snapshot-check

• rds-postgresql-logs-to-cloudwatch

• istanza rds-postgres-crittografata in transito

• crittografia rds-proxy-tls

• rds-resources-protected-by-backup-plan

• rds-snapshots-public-prohibited

• rds-snapshot-encrypted

• rds-sqlserver-crittografato in transito

• rds-sql-server-logs-to-cloudwatch

• rds-storage-encrypted

• redshift-audit-logging-enabled

• redshift-backup-enabled

• redshift-cluster-configuration-check

• redshift-cluster-kms-enabled

• redshift-cluster-maintenancesettings-check

• abilitato per redshift-cluster-multi-az

• redshift-cluster-parameter-group-taggato

• redshift-cluster-public-access-check

• redshift-cluster-subnet-group-multi-az

• redshift-default-admin-check

• redshift-default-db-name-check

• redshift-enhanced-vpc-routing-enabled

• redshift-require-tls-ssl

• redshift-serverless-default-admin-check

• redshift-serverless-default-db-name-check

• crittografia redshift-serverless-namespace-cmk-

• redshift-serverless-publish-logs-to-cloudwatch

• redshift-serverless-workgroup-crittografato in transito

• redshift-serverless-workgroup-no-accesso pubblico

• redshift-serverless-workgroup-routes-within-vpc

• accesso illimitato alla porta redshift

• required-tags

• etichettato con resiliencehub-app

• resiliencehub-resiliencypolicy-taggato

• restricted-incoming-traffic

• root-account-hardware-mfa-enabled

• root-account-mfa-enabled

• route53-recovery-control-cluster-taggato

• route53-recovery-readiness-etichettato con cella

• route53-recovery-readiness-readiness-check-taggato

• taggato con route53-recovery-readiness-recovery-group-

• con tag route53-recovery-readiness-resource-set-tagged

• route53-resolver-firewall-domain-list-tagged

• taggato con route53-resolver-firewall-rule-group-association-

• taggato con route53-resolver-firewall-rule-group-

• etichettato con route53-resolver-resolver-endpoint

• etichettato con route53-resolver-resolver-rule-

• rum-app-monitor-cloudwatch-logs-abilitato

• taggato con rum-app-monitor-

• s3express-dir-bucket-lifecycle-rules-check

• s3-access-point-in-vpc-only

• s3-access-point-public-access-blocks

• s3-account-level-public-access-blocks

• s3-account-level-public-access-blocks-periodic

• s3-bucket-acl-prohibited

• s3-bucket-blacklisted-actions-prohibited

• s3-bucket abilitato per la replica tra regioni

• s3-bucket-default-lock-enabled

• s3-bucket-level-public-access-prohibited

• s3-bucket-logging-enabled

• s3-bucket-mfa-delete-enabled

• s3-bucket-policy-grantee-check

• s3-bucket-policy-not-more-permissive

• s3-bucket-public-read-prohibited

• s3-bucket-public-write-prohibited

• s3-bucket-replication-enabled

• s3-bucket-server-side-encryption-enabled

• s3-bucket-ssl-requests-only

• etichettato con s3-bucket

• s3-bucket-versioning-enabled

• s3-default-encryption-kms

• s3-directory-bucket-lifecycle-policy-rule-check

• s3-event-notifications-enabled

• s3-last-backup-recovery-point-created

• s3-lifecycle-policy-check

• s3-meets-restore-time-target

• risorse s3-in-logicamente-air-gapped-vault

• s3-resources-protected-by-backup-plan

• s3-version-lifecycle-policy-check

• taggato con sagemaker-app-image-config-

• sagemaker-data-quality-job-encrypt-in-transit

• sagemaker-data-quality-job-isolation

• dominio-sagemaker-in-vpc

• taggato con dominio sagemaker

• sagemaker-endpoint-configuration-kms-key-configured

• sagemaker-endpoint-config-kms-key-required

• sagemaker-endpoint-config-prod-instance-count

• sagemaker-featuregroup-description

• sagemaker-featuregroup-encryption-at-rest

• crittografia sagemaker-featuregroup-online-store-

• taggato con sagemaker-feature-group

• descrizione dell'immagine con sagemaker

• taggato con sagemaker

• taggato con sagemaker inferenceexperiment-

• sagemaker-inf-experiment-data-storage-kms-crittografato

• sagemaker-inf-experiment-instance-storage-kms-crittografato

• sagemaker-model-bias-job-encrypt-in-transit

• sagemaker-model-bias-job-isolation

• sagemaker-model-explainability-job-encrypt-in-transit

• sagemaker-model-explainability-job-network-isolation

• modello-sagemaker-in-vpc

• abilitato all'isolamento del modello sagemaker

• registro privato sagemaker-model-multicontainer-

• sagemaker-model-private-registry-obbligatorio

• sagemaker-model-quality-job-definition-isolation

• sagemaker-model-quality-job-encrypt-in-transit

• sagemaker-monitoring-schedule-isolation

• sagemaker-notebook-instance-inside-vpc

• sagemaker-notebook-instance-kms-key-configured

• versione-della-platform-sagemaker-notebook-instance-

• sagemaker-notebook-instance-root-access-check

• sagemaker-notebook-instance-storage-vol-kms-crittografata

• sagemaker-notebook-no-direct-internet-access

• secretsmanager-rotation-enabled-check

• secretsmanager-scheduled-rotation-success-check

• secretsmanager-secret-periodic-rotation

• secretsmanager-secret-unused

• secretsmanager-using-cmk

• securityhub-enabled

• security-account-information-provided

• service-catalog-portfolio-taggato

• catalogo-di-servizi-condiviso all'interno dell'organizzazione

• service-vpc-endpoint-enabled

• ses-malware-scanning-enabled

• ses-sending-tls-required

• signer-signingprofile - taggato

• sns-encrypted-kms

• sns-topic-message-delivery-notification-enabled

• sns-topic-nessun accesso pubblico

• sqs-queue-dlq-check

• sqs-queue-senza accesso pubblico

• sqs-queue-policy-controllo di accesso completo

• ssm-automation-block-public-sharing

• ssm-automation-logging abilitato

• ssm-document-not-public

• con tag ssm-document

• stepfunctions-state-machine-taggato

• step-functions-state-machine-logging-enabled

• storagegateway-last-backup-recovery-point-created

• risorse-di-storagegateway-in-logicamente-air-gapped-vault

• storagegateway-resources-protected-by-backup-plan

• subnet-auto-assign-public-ip-disabled

• descrizione del contratto di trasferimento

• contratto di trasferimento etichettato

• descrizione del certificato di trasferimento

• certificato di trasferimento etichettato

• transfer-connector-as2-encryption-algorithm-check

• transfer-connector-as2-mdn-signing-algorithm-check

• transfer-connector-as2-signing-algorithm-check

• transfer-connector-logging-abilitato

• transfer-connector-taggato

• transfer-family-server-no-ftp

• transfer-profile-taggato

• descrizione del flusso di lavoro di trasferimento

• transfer-workflow-taggato

• virtualmachine-last-backup-recovery-point-created

• risorse della macchina virtuale in un vault logicamente airgapped

• virtualmachine-resources-protected-by-backup-plan

• vpc-default-security-group-closed

• abilitato per vpc-endpoint

• vpc-flow-logs-enabled

• vpc-network-acl-unused-check

• vpc-peering-dns-resolution-check

• vpc-sg-open-only-to-authorized-ports

• vpc-sg-port-restriction-check

• vpc-vpn-2-tunnels-up

• wafv2-logging-enabled

• wafv2-rulegroup-logging-enabled

• wafv2-rulegroup-not-empty

• wafv2-webacl-not-empty

• waf-regional-rulegroup-not-empty

• waf-regional-rule-not-empty

• waf-regional-webacl-not-empty

• workspaces-connection-alias-taggato

• workspaces-root-volume-encryption-enabled

• workspaces-user-volume-encryption-abilitato

• workspaces-workspace-taggato