Update 0350-amazon_rules.xml

[odintree]

Hi team,

The purpose of this PR is to update the ConfigHistory rules. The rule 80453 can flood the Wazuh if the AWS Config is enabled. For this reason, I have silent this rule when the aws.configurationItemStatus field has the value OK. And created 4 new child rules that will be triggered once the specific status appears.

The valid values for aws.configurationItemStatus are:
OK – The resource configuration has been updated
ResourceDiscovered – The resource was newly discovered
ResourceNotRecorded – The resource was discovered but its configuration was not recorded since the recorder excludes the recording of resources of this type
ResourceDeleted – The resource was deleted
ResourceDeletedNotRecorded – The resource was deleted but its configuration was not recorded since the recorder excludes the recording of resources of this type

As I have mentioned above when it is OK the rule will be silenced (level = 0) for the rest I have set the level to 3 as of now.

Kind regards,
Bin.

[MiguelCasaresRobles]

I checked the AWS config rule that generates the alerts were addressing in this PR get-resource-config-history and there is no mapping compliance for them. For that reason, we did not add the mapping to these new rules.

References: https://awscli.amazonaws.com/v2/documentation/api/latest/reference/configservice/get-resource-config-history.html
https://docs.aws.amazon.com/config/latest/developerguide/operational-best-practices-for-pci-dss.html