Skip to content

Commit de0d5ea

Browse files
acx1729acx1729
committed
feat: cleaning up supportability
1 parent e87fd22 commit de0d5ea

13 files changed

+216
-48
lines changed

‎compliance/frameworks/baseline/supportability/aws_baseline_supportability.yaml‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
ID: aws_baseline_supportability
2+
Title: "AWS Baseline Supportability"
3+
Description: "Supportability checks for AWS resources."
4+
AutoAssign: true
5+
Children:
6+
- aws_baseline_supportability_compute
7+
- aws_baseline_supportability_kubernetes_management
8+
- aws_baseline_supportability_networking
9+
- aws_baseline_supportability_certificates
10+
- aws_baseline_supportability_logging_and_monitoring
11+
- aws_baseline_supportability_database
12+
- aws_baseline_supportability_iam_and_security
13+
Controls: []
14+
Enabled: true
15+
SectionCode: aws_baseline_supportability
16+
Tags:
17+
baseline_category:
18+
- supportability
19+
type:
20+
- BASELINE
21+
TracksDriftEvents: false

‎compliance/frameworks/baseline/supportability/aws_baseline_supportability_certificates.yaml‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
ID: aws_baseline_supportability_certificates
2+
Title: "AWS Baseline Supportability - Certificates"
3+
Description: "Ensure AWS certificates are managed properly."
4+
AutoAssign: true
5+
Controls:
6+
- aws_acm_certificate_expired
7+
- aws_acm_certificates_validity
8+
- aws_acm_certificates_with_wildcard_domain_names
9+
Enabled: true
10+
SectionCode: aws_baseline_supportability_certificates
11+
Tags:
12+
baseline_category:
13+
- supportability
14+
type:
15+
- BASELINE
16+
TracksDriftEvents: false

‎compliance/frameworks/baseline/supportability/aws_baseline_supportability_compute.yaml‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
ID: aws_baseline_supportability_compute
2+
Title: "AWS Baseline Supportability - Compute"
3+
Description: "Ensure AWS compute resources are configured for supportability."
4+
AutoAssign: true
5+
Controls:
6+
- aws_ec2_instance_naming_conventions
7+
- aws_ebs_volumes_attached_to_stopped_ec2_instances
8+
- aws_unused_aws_ec2_key_pairs
9+
- aws_ec2_instances_with_multiple_elastic_network_interfaces
10+
- aws_check_for_ecs_container_instance_agent_version
11+
Enabled: true
12+
SectionCode: aws_baseline_supportability_compute
13+
Tags:
14+
baseline_category:
15+
- supportability
16+
type:
17+
- BASELINE
18+
TracksDriftEvents: false

‎compliance/frameworks/baseline/supportability/aws_baseline_supportability_database.yaml‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
ID: aws_baseline_supportability_database
2+
Title: "AWS Baseline Supportability - Database"
3+
Description: "Ensure AWS RDS instances are configured for supportability."
4+
AutoAssign: true
5+
Controls:
6+
- aws_rds_database_instances_have_a_minimum_acceptable_backup_policy
7+
- aws_rds_database_instances_must_have_a_minimum_acceptable_restore_time
8+
Enabled: true
9+
SectionCode: aws_baseline_supportability_database
10+
Tags:
11+
baseline_category:
12+
- supportability
13+
type:
14+
- BASELINE
15+
TracksDriftEvents: false

‎compliance/frameworks/baseline/supportability/aws_baseline_supportability_iam_and_security.yaml‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
ID: aws_baseline_supportability_iam_and_security
2+
Title: "AWS Baseline Supportability - IAM and Security"
3+
Description: "Ensure AWS IAM policies and security are configured for supportability."
4+
AutoAssign: true
5+
Controls:
6+
- aws_multi_account_centralized_management
7+
- aws_use_aws_managed_policy_to_access_amazon_ecr_repositories
8+
- aws_use_aws_managed_policy_to_manage_aws_resources
9+
Enabled: true
10+
SectionCode: aws_baseline_supportability_iam_and_security
11+
Tags:
12+
baseline_category:
13+
- supportability
14+
type:
15+
- BASELINE
16+
TracksDriftEvents: false

‎compliance/frameworks/baseline/supportability/aws_baseline_supportability_kubernetes_management.yaml‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
ID: aws_baseline_supportability_kubernetes_management
2+
Title: "AWS Baseline Supportability - Kubernetes Management"
3+
Description: "Ensure AWS EKS clusters are configured for supportability."
4+
AutoAssign: true
5+
Controls:
6+
- aws_disable_remote_access_to_eks_cluster_node_groups
7+
- aws_enable_cloudtrail_logging_for_kubernetes_api_calls
8+
- aws_eks_cluster_node_group_iam_role_policies
9+
- aws_use_oidc_provider_for_authenticating_kubernetes_api_calls
10+
- aws_enable_cloudwatch_container_insights
11+
Enabled: true
12+
SectionCode: aws_baseline_supportability_kubernetes_management
13+
Tags:
14+
baseline_category:
15+
- supportability
16+
type:
17+
- BASELINE
18+
TracksDriftEvents: false

‎compliance/frameworks/baseline/supportability/aws_baseline_supportability_logging_and_monitoring.yaml‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
ID: aws_baseline_supportability_logging_and_monitoring
2+
Title: "AWS Baseline Supportability - Logging and Monitoring"
3+
Description: "Ensure AWS logging and monitoring is configured for supportability."
4+
AutoAssign: true
5+
Controls:
6+
- aws_opensearch_slow_logs
7+
- aws_enable_serverless_log_exports
8+
- aws_instance_level_events_subscriptions
9+
- aws_log_exports
10+
- aws_performance_insights
11+
- aws_security_groups_events_subscriptions
12+
- aws_ecs_task_log_driver_in_use
13+
- aws_lifecycle_policy_in_use
14+
- aws_enable_aurora_cluster_copy_tags_to_snapshots
15+
Enabled: true
16+
SectionCode: aws_baseline_supportability_logging_and_monitoring
17+
Tags:
18+
baseline_category:
19+
- supportability
20+
type:
21+
- BASELINE
22+
TracksDriftEvents: false

‎compliance/frameworks/baseline/supportability/aws_baseline_supportability_networking.yaml‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
ID: aws_baseline_supportability_networking
2+
Title: "AWS Baseline Supportability - Networking"
3+
Description: "Ensure AWS networking resources are configured for supportability."
4+
AutoAssign: true
5+
Controls:
6+
- aws_unused_elastic_network_interfaces
7+
- aws_use_aws_managed_policy_to_manage_networking_resources
8+
Enabled: true
9+
SectionCode: aws_baseline_supportability_networking
10+
Tags:
11+
baseline_category:
12+
- supportability
13+
type:
14+
- BASELINE
15+
TracksDriftEvents: false

‎compliance/frameworks/baseline/supportability/azure_baseline_supportability_general_practices.yaml‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
ID: azure_baseline_supportability_general_practices
2+
Title: "Azure Baseline Supportability - General Practices"
3+
Description: "Ensure general practices for Azure resources are in place."
4+
AutoAssign: true
5+
Controls:
6+
- azure_disable_plain_ftp_deployment
7+
Enabled: true
8+
SectionCode: azure_baseline_supportability_general_practices
9+
Tags:
10+
baseline_category:
11+
- supportability
12+
type:
13+
- BASELINE
14+
TracksDriftEvents: false

‎compliance/frameworks/baseline/supportability/azure_baseline_supportability_key_vault_and_certificates.yaml‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
ID: azure_baseline_supportability_key_vault_and_certificates
2+
Title: "Azure Baseline Supportability - Key Vault and Certificates"
3+
Description: "Ensure Azure Key Vault and certificates are configured for supportability."
4+
AutoAssign: true
5+
Controls:
6+
- azure_keyvault_logging_enabled
7+
- azure_configure_minimum_tls_version
8+
- azure_enable_transparent_data_encryption_for_sql_managed_instance_using_customer_managed_keys
9+
Enabled: true
10+
SectionCode: azure_baseline_supportability_key_vault_and_certificates
11+
Tags:
12+
baseline_category:
13+
- supportability
14+
type:
15+
- BASELINE
16+
TracksDriftEvents: false

0 commit comments

Comments
 (0)