Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Audit Manager > PCI DSS v3.2.1 controls #570

Merged
merged 68 commits into from
Mar 31, 2023
Merged

Conversation

Priyanka-Chatterjee-2000
Copy link
Contributor

@Priyanka-Chatterjee-2000 Priyanka-Chatterjee-2000 commented Mar 3, 2023

No description provided.

@cbruno10 cbruno10 changed the title Add Audit Manger PCI-DSS v3.2.1 controls [WIP] Add Audit Manger PCI DSS v3.2.1 controls [WIP] Mar 28, 2023
@rajlearner17 rajlearner17 changed the title Add Audit Manger PCI DSS v3.2.1 controls [WIP] Add Audit Manager > PCI DSS v3.2.1 controls Mar 29, 2023
Copy link
Contributor

@rajlearner17 rajlearner17 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM after testing and making minor changes.

Copy link
Contributor

@misraved misraved left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@Priyanka-Chatterjee-2000 please take a look at the review comments. Thanks!!

Also could you please make updates to README and docs/index.md files to highighting the new benchmark?

conformance_pack/cloudformation.sp Outdated Show resolved Hide resolved
conformance_pack/codebuild.sp Show resolved Hide resolved
conformance_pack/codebuild.sp Outdated Show resolved Hide resolved
conformance_pack/codebuild.sp Outdated Show resolved Hide resolved
conformance_pack/codedeploy.sp Outdated Show resolved Hide resolved
when predicates is null or jsonb_array_length(predicates) = 0 then title || ' has no attached conditions.'
else title || ' has attached conditions.'
end as reason
${local.common_dimensions_sql}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Does the resource support tags?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No the resource does not support tags

conformance_pack/waf.sp Outdated Show resolved Hide resolved
pci_dss_v321/requirement_10.sp Outdated Show resolved Hide resolved
pci_dss_v321/requirement_2.sp Outdated Show resolved Hide resolved
pci_dss_v321/requirement_2.sp Show resolved Hide resolved
}

control "waf_web_acl_logging_enabled" {
title = "Logging should be enabled on on AWS Web Application Firewall (WAF) classic global web ACLs"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
title = "Logging should be enabled on on AWS Web Application Firewall (WAF) classic global web ACLs"
title = "WAF web ACL logging should be enabled"

]

tags = merge(local.pci_dss_v321_requirement_1_common_tags, {
pci_dss_v321_item_id = "1.3.3"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
pci_dss_v321_item_id = "1.3.3"
pci_dss_v321_item_id = "1.3.5"

@misraved misraved merged commit 5e79af2 into release/v0.60 Mar 31, 2023
@misraved misraved deleted the pci_v321 branch March 31, 2023 13:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants