Controls
5 controls from PCI DSS v4.0 apply to this module.
| Control | Clause | Change |
|---|---|---|
| CloudWatch log groups should have retention period of at least 365 dayscloudwatch_log_group_retention_period_365 3.2.1 | 3.2.1 | |
| FSx for OpenZFS file systems should be configured to copy tags to backups and volumesfsx_file_system_copy_tags_to_backup_and_volume_enabled 10.3.3 | 10.3.3 | |
| FSx for Lustre file systems should be configured to copy tags to backupsfsx_lustre_file_system_copy_tags_to_backup_enabled 10.3.3 | 10.3.3 | |
| Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled 3.5.1 | 3.5.1 | |
| VPC Security groups should only allow unrestricted incoming traffic for authorized portsvpc_security_group_allows_ingress_authorized_ports 1.3.2 | 1.3.2 |