Controls
8 controls from PCI DSS v4.0 apply to this module.
| Control | Clause | Change |
|---|---|---|
| CloudWatch log groups should have retention period of at least 365 dayscloudwatch_log_group_retention_period_365 3.2.1 | 3.2.1 | |
| ElastiCache clusters should not use the default subnet groupelasticache_cluster_no_default_subnet_group 1.4.4 | 1.4.4 | |
| ElastiCache Redis clusters should have automatic backups enabled with a retention period of 15 days or greaterelasticache_redis_cluster_automatic_backup_retention_15_days 10.3.3 | 10.3.3 | |
| ElastiCache for Redis replication groups should be encrypted at restelasticache_replication_group_encryption_at_rest_enabled 3.5.1 | 3.5.1 | |
| ElastiCache for Redis replication groups should be encrypted with CMKelasticache_replication_group_encryption_at_rest_enabled_with_kms_cmk 3.5.1 | 3.5.1 | |
| ElastiCache for Redis replication groups should be encrypted in transitelasticache_replication_group_encryption_in_transit_enabled 2.2.7 | 2.2.7 | |
| Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled 3.5.1 | 3.5.1 | |
| VPC Security groups should only allow unrestricted incoming traffic for authorized portsvpc_security_group_allows_ingress_authorized_ports 1.3.2 | 1.3.2 |