1+ framework :
2+ id : tagging
3+ title : Tagging
4+ description : Tagging
5+ section-code : tagging
6+ metadata :
7+ defaults :
8+ auto-assign : false
9+ enabled : true
10+ tracks-drift-events : false
11+ tags :
12+ category :
13+ - Compliance
14+ platform_benchmark_type :
15+ - compliance
16+ platform_category :
17+ - Best Practices
18+ plugin :
19+ - aws
20+ - azure
21+ service :
22+ - AWS
23+ - Azure
24+ type :
25+ - Benchmark
26+ control-group :
27+ - id : tagging_aws_tagging
28+ title : AWS Tagging
29+ description : AWS Tagging
30+ section-code : tagging_aws_tagging
31+ metadata :
32+ tags :
33+ category :
34+ - Compliance
35+ platform_benchmark_type :
36+ - compliance
37+ platform_category :
38+ - Best Practices
39+ plugin :
40+ - aws
41+ service :
42+ - AWS
43+ type :
44+ - Benchmark
45+ controls :
46+ - aws_mandatory_sql_accessanalyzer_analyzer_mandatory
47+ - aws_mandatory_sql_api_gateway_stage_mandatory
48+ - aws_mandatory_sql_cloudfront_distribution_mandatory
49+ - aws_mandatory_sql_cloudtrail_trail_mandatory
50+ - aws_mandatory_sql_cloudwatch_alarm_mandatory
51+ - aws_mandatory_sql_cloudwatch_log_group_mandatory
52+ - aws_mandatory_sql_codebuild_project_mandatory
53+ - aws_mandatory_sql_codecommit_repository_mandatory
54+ - aws_mandatory_sql_codepipeline_pipeline_mandatory
55+ - aws_mandatory_sql_config_rule_mandatory
56+ - aws_mandatory_sql_dax_cluster_mandatory
57+ - aws_mandatory_sql_directory_service_directory_mandatory
58+ - aws_mandatory_sql_dms_replication_instance_mandatory
59+ - aws_mandatory_sql_dynamodb_table_mandatory
60+ - aws_mandatory_sql_ebs_snapshot_mandatory
61+ - aws_mandatory_sql_ebs_volume_mandatory
62+ - aws_mandatory_sql_ec2_application_load_balancer_mandatory
63+ - aws_mandatory_sql_ec2_classic_load_balancer_mandatory
64+ - aws_mandatory_sql_ec2_gateway_load_balancer_mandatory
65+ - aws_mandatory_sql_ec2_instance_mandatory
66+ - aws_mandatory_sql_ec2_network_load_balancer_mandatory
67+ - aws_mandatory_sql_ec2_reserved_instance_mandatory
68+ - aws_mandatory_sql_ecr_repository_mandatory
69+ - aws_mandatory_sql_ecs_container_instance_mandatory
70+ - aws_mandatory_sql_ecs_service_mandatory
71+ - aws_mandatory_sql_efs_file_system_mandatory
72+ - aws_mandatory_sql_eks_addon_mandatory
73+ - aws_mandatory_sql_eks_cluster_mandatory
74+ - aws_mandatory_sql_elastic_beanstalk_application_mandatory
75+ - aws_mandatory_sql_elastic_beanstalk_environment_mandatory
76+ - aws_mandatory_sql_elasticache_cluster_mandatory
77+ - aws_mandatory_sql_elasticsearch_domain_mandatory
78+ - aws_mandatory_sql_eventbridge_rule_mandatory
79+ - aws_mandatory_sql_guardduty_detector_mandatory
80+ - aws_mandatory_sql_iam_role_mandatory
81+ - aws_mandatory_sql_iam_server_certificate_mandatory
82+ - aws_mandatory_sql_iam_user_mandatory
83+ - aws_mandatory_sql_inspector_assessment_template_mandatory
84+ - aws_mandatory_sql_kinesis_firehose_delivery_stream_mandatory
85+ - aws_mandatory_sql_kms_key_mandatory
86+ - aws_mandatory_sql_lambda_function_mandatory
87+ - aws_mandatory_sql_rds_db_cluster_mandatory
88+ - aws_mandatory_sql_rds_db_cluster_parameter_group_mandatory
89+ - aws_mandatory_sql_rds_db_cluster_snapshot_mandatory
90+ - aws_mandatory_sql_rds_db_instance_mandatory
91+ - aws_mandatory_sql_rds_db_option_group_mandatory
92+ - aws_mandatory_sql_rds_db_parameter_group_mandatory
93+ - aws_mandatory_sql_rds_db_snapshot_mandatory
94+ - aws_mandatory_sql_rds_db_subnet_group_mandatory
95+ - aws_mandatory_sql_redshift_cluster_mandatory
96+ - aws_mandatory_sql_route53_domain_mandatory
97+ - aws_mandatory_sql_route53_resolver_endpoint_mandatory
98+ - aws_mandatory_sql_s3_bucket_mandatory
99+ - aws_mandatory_sql_sagemaker_endpoint_configuration_mandatory
100+ - aws_mandatory_sql_sagemaker_model_mandatory
101+ - aws_mandatory_sql_sagemaker_notebook_instance_mandatory
102+ - aws_mandatory_sql_sagemaker_training_job_mandatory
103+ - aws_mandatory_sql_secretsmanager_secret_mandatory
104+ - aws_mandatory_sql_ssm_parameter_mandatory
105+ - aws_mandatory_sql_vpc_eip_mandatory
106+ - aws_mandatory_sql_vpc_mandatory
107+ - aws_mandatory_sql_vpc_nat_gateway_mandatory
108+ - aws_mandatory_sql_vpc_network_acl_mandatory
109+ - aws_mandatory_sql_vpc_security_group_mandatory
110+ - aws_mandatory_sql_vpc_vpn_connection_mandatory
111+ - aws_mandatory_sql_wafv2_ip_set_mandatory
112+ - aws_mandatory_sql_wafv2_regex_pattern_set_mandatory
113+ - aws_mandatory_sql_wafv2_rule_group_mandatory
114+ - aws_mandatory_sql_wafv2_web_acl_mandatory
115+ - id : tagging_azure_tagging
116+ title : Azure Tagging
117+ description : Azure Tagging
118+ section-code : tagging_azure_tagging
119+ metadata :
120+ tags :
121+ category :
122+ - Compliance
123+ platform_benchmark_type :
124+ - compliance
125+ platform_category :
126+ - Best Practices
127+ plugin :
128+ - azure
129+ service :
130+ - Azure
131+ type :
132+ - Benchmark
133+ controls :
134+ - azure_mandatory_sql_resource_group_api_management_mandatory
135+ - azure_mandatory_sql_resource_group_app_service_environment_mandatory
136+ - azure_mandatory_sql_resource_group_app_service_function_app_mandatory
137+ - azure_mandatory_sql_resource_group_app_service_plan_mandatory
138+ - azure_mandatory_sql_resource_group_app_service_web_app_mandatory
139+ - azure_mandatory_sql_resource_group_application_security_group_mandatory
140+ - azure_mandatory_sql_resource_group_batch_account_mandatory
141+ - azure_mandatory_sql_resource_group_compute_availability_set_mandatory
142+ - azure_mandatory_sql_resource_group_compute_disk_encryption_set_mandatory
143+ - azure_mandatory_sql_resource_group_compute_disk_mandatory
144+ - azure_mandatory_sql_resource_group_compute_image_mandatory
145+ - azure_mandatory_sql_resource_group_compute_snapshot_mandatory
146+ - azure_mandatory_sql_resource_group_compute_virtual_machine_mandatory
147+ - azure_mandatory_sql_resource_group_compute_virtual_machine_scale_set_mandatory
148+ - azure_mandatory_sql_resource_group_container_registry_mandatory
149+ - azure_mandatory_sql_resource_group_cosmosdb_account_mandatory
150+ - azure_mandatory_sql_resource_group_cosmosdb_mongo_database_mandatory
151+ - azure_mandatory_sql_resource_group_cosmosdb_sql_database_mandatory
152+ - azure_mandatory_sql_resource_group_data_factory_mandatory
153+ - azure_mandatory_sql_resource_group_data_lake_analytics_account_mandatory
154+ - azure_mandatory_sql_resource_group_data_lake_store_mandatory
155+ - azure_mandatory_sql_resource_group_eventhub_namespace_mandatory
156+ - azure_mandatory_sql_resource_group_express_route_circuit_mandatory
157+ - azure_mandatory_sql_resource_group_firewall_mandatory
158+ - azure_mandatory_sql_resource_group_iothub_mandatory
159+ - azure_mandatory_sql_resource_group_key_vault_deleted_vault_mandatory
160+ - azure_mandatory_sql_resource_group_key_vault_key_mandatory
161+ - azure_mandatory_sql_resource_group_key_vault_managed_hardware_security_module_mandatory
162+ - azure_mandatory_sql_resource_group_key_vault_mandatory
163+ - azure_mandatory_sql_resource_group_key_vault_secret_mandatory
164+ - azure_mandatory_sql_resource_group_kubernetes_cluster_mandatory
165+ - azure_mandatory_sql_resource_group_lb_mandatory
166+ - azure_mandatory_sql_resource_group_log_alert_mandatory
167+ - azure_mandatory_sql_resource_group_log_profile_mandatory
168+ - azure_mandatory_sql_resource_group_logic_app_workflow_mandatory
169+ - azure_mandatory_sql_resource_group_mariadb_server_mandatory
170+ - azure_mandatory_sql_resource_group_mssql_elasticpool_mandatory
171+ - azure_mandatory_sql_resource_group_mssql_managed_instance_mandatory
172+ - azure_mandatory_sql_resource_group_mysql_server_mandatory
173+ - azure_mandatory_sql_resource_group_network_interface_mandatory
174+ - azure_mandatory_sql_resource_group_network_security_group_mandatory
175+ - azure_mandatory_sql_resource_group_network_watcher_flow_log_mandatory
176+ - azure_mandatory_sql_resource_group_network_watcher_mandatory
177+ - azure_mandatory_sql_resource_group_postgresql_server_mandatory
178+ - azure_mandatory_sql_resource_group_public_ip_mandatory
179+ - azure_mandatory_sql_resource_group_recovery_services_vault_mandatory
180+ - azure_mandatory_sql_resource_group_redis_cache_mandatory
181+ - azure_mandatory_sql_resource_group_route_table_mandatory
182+ - azure_mandatory_sql_resource_group_search_service_mandatory
183+ - azure_mandatory_sql_resource_group_servicebus_namespace_mandatory
184+ - azure_mandatory_sql_resource_group_sql_database_mandatory
185+ - azure_mandatory_sql_resource_group_sql_server_mandatory
186+ - azure_mandatory_sql_resource_group_storage_account_mandatory
187+ - azure_mandatory_sql_resource_group_stream_analytics_job_mandatory
188+ - azure_mandatory_sql_resource_group_virtual_network_gateway_mandatory
189+ - azure_mandatory_sql_resource_group_virtual_network_mandatory
190+ - azure_mandatory_sql_subscription_resource_group_mandatory
191+ # - id: tagging_cost_controls
192+ # title: Cost Controls
193+ # description: Cost Controls
194+ # section-code: cost_controls
195+ # metadata:
196+ # tags:
197+ # category:
198+ # - Compliance
199+ # platform_benchmark_type:
200+ # - compliance
201+ # platform_category:
202+ # - Best Practices
203+ # plugin:
204+ # - aws
205+ # service:
206+ # - AWS
207+ # type:
208+ # - Benchmark
209+ # controls:
210+ # - platform_mom_cost_growth_15
211+ # - platform_connection_mom_cost_growth
0 commit comments