Controls
6 controls from PCI DSS v4.0 apply to this module.
| Control | Clause | Change |
|---|---|---|
| CloudWatch log groups should have retention period of at least 365 dayscloudwatch_log_group_retention_period_365 3.2.1 | 3.2.1 | |
| ECS clusters should have container insights enabledecs_cluster_container_insights_enabled None | None | |
| ECS fargate services should run on the latest fargate platform versionecs_service_fargate_using_latest_platform_version 6.3.3 | 6.3.3 | |
| ECS task definitions should not share the host's process namespaceecs_task_definition_no_host_pid_mode 1.4.5 | 1.4.5 | |
| Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled 3.5.1 | 3.5.1 | |
| VPC Security groups should only allow unrestricted incoming traffic for authorized portsvpc_security_group_allows_ingress_authorized_ports 1.3.2 | 1.3.2 |