Controls
9 controls from PCI DSS v4.0 apply to this module.
| Control | Clause | Change |
|---|---|---|
| Attached EBS volumes should have encryption enabledebs_attached_volume_encryption_enabled 3.5.1 | 3.5.1 | |
| EBS volumes should have encryption at rest enabledebs_volume_encryption_at_rest_enabled 3.5.1 | 3.5.1 | |
| EC2 instances should have detailed monitoring enabledec2_instance_detailed_monitoring_enabled 10.2.1.1 | 10.2.1.1 | |
| EC2 instances should have IAM profile attachedec2_instance_iam_profile_attached 7.2.1 | 7.2.1 | |
| EC2 instances should be in a VPCec2_instance_in_vpc 1.4.4 | 1.4.4 | |
| EC2 instances should not use key pairs in running stateec2_instance_no_amazon_key_pair 8.3.11 | 8.3.11 | |
| EC2 instances should not have a public IP addressec2_instance_not_publicly_accessible 11.5.2 | 11.5.2 | |
| EC2 instances should use IMDSv2ec2_instance_uses_imdsv2 8.2.8 | 8.2.8 | |
| VPC Security groups should only allow unrestricted incoming traffic for authorized portsvpc_security_group_allows_ingress_authorized_ports 1.3.2 | 1.3.2 |