Controls
3 controls from PCI DSS v4.0 apply to this module.
| Control | Clause | Change |
|---|---|---|
| CloudWatch alarms should have an action configuredcloudwatch_alarm_action_enabled 10.2.1.1 | 10.2.1.1 | |
| CloudWatch log groups should have retention period of at least 365 dayscloudwatch_log_group_retention_period_365 3.2.1 | 3.2.1 | |
| Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled 3.5.1 | 3.5.1 |