Controls
5 controls from PCI DSS v4.0 apply to this module.
| Control | Clause | Change |
|---|---|---|
| CloudWatch log groups should have retention period of at least 365 dayscloudwatch_log_group_retention_period_365 3.2.1 | 3.2.1 | |
| ECR repositories should have image scan on push enabledecr_repository_image_scan_on_push_enabled 11.3.1 | 11.3.1 | |
| Lambda functions should be in a VPClambda_function_in_vpc 1.2.8 | 1.2.8 | |
| Lambda functions should use latest runtimeslambda_function_use_latest_runtime 6.3.3 | 6.3.3 | |
| Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled 3.5.1 | 3.5.1 |