Controls
9 controls from PCI DSS v4.0 apply to this module.
| Control | Clause | Change |
|---|---|---|
| CloudWatch log groups should have retention period of at least 365 dayscloudwatch_log_group_retention_period_365 3.2.1 | 3.2.1 | |
| Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled 3.5.1 | 3.5.1 | |
| RDS DB instance automatic minor version upgrade should be enabledrds_db_instance_automatic_minor_version_upgrade_enabled 6.3.3 | 6.3.3 | |
| RDS DB instance backup should be enabledrds_db_instance_backup_enabled 10.3.3 | 10.3.3 | |
| RDS DB instances backup retention period should be greater than or equal to 7rds_db_instance_backup_retention_period_less_than_7 10.3.3 | 10.3.3 | |
| RDS DB instances should be integrated with CloudWatch logsrds_db_instance_cloudwatch_logs_enabled 5.3.4 | 5.3.4 | |
| RDS DB instance encryption at rest should be enabledrds_db_instance_encryption_at_rest_enabled 3.5.1 | 3.5.1 | |
| RDS DB instances should have iam authentication enabledrds_db_instance_iam_authentication_enabled 7.2.1 | 7.2.1 | |
| RDS DB instances should not use public subnetrds_db_instance_no_public_subnet 1.2.8 | 1.2.8 |