Controls
7 controls from PCI DSS v4.0 apply to this module.
| Control | Clause | Change |
|---|---|---|
| CloudWatch log groups should have retention period of at least 365 dayscloudwatch_log_group_retention_period_365 3.2.1 | 3.2.1 | |
| EC2 launch templates should not assign public IPs to network interfacesec2_launch_template_not_publicly_accessible 1.4.5 | 1.4.5 | |
| EKS clusters should have control plane audit logging enabledeks_cluster_control_plane_audit_logging_enabled 5.3.4 | 5.3.4 | |
| EKS clusters endpoint public access should be restrictedeks_cluster_endpoint_public_access_restricted 1.2.8 | 1.2.8 | |
| EKS clusters should be configured to have kubernetes secrets encrypted using KMSeks_cluster_secrets_encrypted 3.5.1 | 3.5.1 | |
| Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled 3.5.1 | 3.5.1 | |
| VPC Security groups should only allow unrestricted incoming traffic for authorized portsvpc_security_group_allows_ingress_authorized_ports 1.3.2 | 1.3.2 |