Skip to content

Commit e87fd22

Browse files
acx1729acx1729
committed
feat: multiple cleanups; test framework
1 parent f18a705 commit e87fd22

9 files changed

+168
-64
lines changed

‎compliance/frameworks/baseline/reliability/aws_baseline_reliability.yaml‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
ID: aws_baseline_reliability
2+
Title: "AWS Baseline Reliability"
3+
Description: "AWS reliability framework focusing on resiliency, failover, and disaster recovery."
4+
AutoAssign: true
5+
Children:
6+
- aws_baseline_reliability_infrastructure
7+
- aws_baseline_reliability_monitoring
8+
- aws_baseline_reliability_backup
9+
Enabled: true
10+
SectionCode: aws_baseline_reliability
11+
Tags:
12+
baseline_category:
13+
- reliability
14+
type:
15+
- Baseline
16+
TracksDriftEvents: false

‎compliance/frameworks/baseline/reliability/aws_baseline_reliability_backup.yaml‎

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
ID: aws_baseline_reliability_backup
2+
Title: "AWS Reliability - Backup & Recovery"
3+
Description: "Ensures backups and recovery systems are in place for AWS services."
4+
AutoAssign: true
5+
Controls:
6+
- aws_use_aws_backup_service_in_use_for_amazon_rds
7+
- aws_rds_automated_backups_enabled
8+
- aws_backtrack
9+
- aws_aurora_database_instance_accessibility
10+
- aws_dynamodb_instances_have_backup_with_lifecyclepolicy_above_35_days
11+
- aws_dynamodb_instances_have_backup_withing_48_hours
12+
- aws_ebs_instances_have_backup_with_lifecyclepolicy_above_35_days
13+
- aws_ebs_instances_have_backup_withing_rpo_period
14+
- aws_ec2_instances_have_backup_with_lifecyclepolicy_above_35_days
15+
- aws_ec2_instances_have_backup_withing_48_hours
16+
- aws_efs_files_have_backup_with_lifecyclepolicy_above_35_days
17+
- aws_efs_files_have_backup_withing_48_hours
18+
- aws_rds_database_instances_have_a_minimum_acceptable_backup_policy
19+
- aws_rds_database_instances_must_have_a_minimum_acceptable_restore_time
20+
Enabled: true
21+
SectionCode: aws_baseline_reliability_backup
22+
Tags:
23+
baseline_category:
24+
- reliability
25+
type:
26+
- Baseline
27+
TracksDriftEvents: false

‎compliance/frameworks/baseline/reliability/aws_baseline_reliability_infrastructure.yaml‎

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
ID: aws_baseline_reliability_infrastructure
2+
Title: "AWS Reliability - Infrastructure"
3+
Description: "Ensures AWS infrastructure follows best practices for reliability."
4+
AutoAssign: true
5+
Controls:
6+
- aws_ec2_ami_too_old
7+
- aws_disable_public_ip_address_assignment_for_ec2_instances
8+
- aws_opensearch_dedicated_master_enabled
9+
- aws_opensearch_zone_awareness_enabled
10+
- aws_elbv2_alb_minimum_number_of_ec2_target_instances
11+
- aws_elbv2_glb_minimum_number_of_ec2_target_instances
12+
- aws_ec2_instance_termination_protection
13+
- aws_enable_deletion_protection
14+
- aws_elb_connection_draining_enabled
15+
- aws_elb_cross_zone_load_balancing_enabled
16+
- aws_check_for_amazon_ecs_service_placement_strategy
17+
Enabled: true
18+
SectionCode: aws_baseline_reliability_infrastructure
19+
Tags:
20+
baseline_category:
21+
- reliability
22+
type:
23+
- Baseline
24+
TracksDriftEvents: false

‎compliance/frameworks/baseline/reliability/aws_baseline_reliability_monitoring.yaml‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
ID: aws_baseline_reliability_monitoring
2+
Title: "AWS Reliability - Monitoring & Alerts"
3+
Description: "Ensures AWS monitoring systems are in place to detect and respond to reliability events."
4+
AutoAssign: true
5+
Controls:
6+
- aws_performance_insights
7+
- aws_rds_event_notifications
8+
- aws_elb_cross_zone_load_balancing_enabled
9+
- aws_enable_cloudtrail_logging_for_kubernetes_api_calls
10+
- aws_enable_cloudwatch_container_insights
11+
- aws_kubernetes_cluster_version
12+
Enabled: true
13+
SectionCode: aws_baseline_reliability_monitoring
14+
Tags:
15+
baseline_category:
16+
- reliability
17+
type:
18+
- Baseline
19+
TracksDriftEvents: false

‎compliance/frameworks/baseline/reliability/azure_baseline_reliability.yaml‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
ID: azure_baseline_reliability
2+
Title: "Azure Baseline Reliability"
3+
Description: "Azure reliability framework focusing on resiliency, failover, and disaster recovery."
4+
AutoAssign: true
5+
Children:
6+
- azure_baseline_reliability_infrastructure.yaml
7+
- azure_baseline_reliability_backup.yaml
8+
- azure_baseline_reliability_monitoring
9+
Enabled: true
10+
SectionCode: azure_baseline_reliability
11+
Tags:
12+
baseline_category:
13+
- reliability
14+
type:
15+
- Baseline
16+
TracksDriftEvents: false

‎compliance/frameworks/baseline/reliability/azure_baseline_reliability_backup.yaml‎

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
ID: azure_baseline_reliability_backup
2+
Title: "Azure Reliability - Backup & Recovery"
3+
Description: "Ensures backups and recovery systems are in place for Azure services."
4+
AutoAssign: true
5+
Controls:
6+
- azure_recovery_service_vault_alert_for_job_failures_enabled
7+
- azure_check_for_sufficient_point_in_time_restore_pitr_backup_retention_period
8+
- azure_check_for_sufficient_soft_deleted_data_retention_period
9+
- azure_check_for_sufficient_daily_backup_retention_period
10+
- azure_check_for_sufficient_instant_restore_retention_period
11+
- azure_enable_soft_delete_for_azure_blob_storage
12+
- azure_enable_auto_failover_groups
13+
Enabled: true
14+
SectionCode: azure_baseline_reliability_backup
15+
Tags:
16+
baseline_category:
17+
- reliability
18+
type:
19+
- Baseline
20+
TracksDriftEvents: false

‎compliance/frameworks/baseline/reliability/azure_baseline_reliability_infrastructure.yaml‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
ID: azure_baseline_reliability_infrastructure
2+
Title: "Azure Reliability - Infrastructure"
3+
Description: "Ensures Azure infrastructure follows best practices for reliability."
4+
AutoAssign: true
5+
Controls:
6+
- azure_check_for_kubernetes_version
7+
- azure_disable_plain_ftp_deployment
8+
- azure_check_for_usage_of_managed_disk_volumes_for_virtual_machines
9+
- azure_check_for_automatic_os_upgrades
10+
- azure_check_for_automatic_instance_repairs
11+
- azure_check_for_instance_termination_notifications_for_virtual_machine_scale_sets
12+
- azure_check_for_associated_load_balancers
13+
- azure_check_for_guest_level_diagnostics_for_virtual_machines
14+
Enabled: true
15+
SectionCode: azure_baseline_reliability_infrastructure
16+
Tags:
17+
baseline_category:
18+
- reliability
19+
type:
20+
- Baseline
21+
TracksDriftEvents: false

‎compliance/frameworks/baseline/reliability/azure_baseline_reliability_monitoring.yaml‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
ID: azure_baseline_reliability_monitoring
2+
Title: "Azure Reliability - Monitoring & Alerts"
3+
Description: "Ensures Azure monitoring systems are in place to detect and respond to reliability events."
4+
AutoAssign: true
5+
Controls:
6+
- azure_check_for_configure_health_monitoring
7+
- azure_configure_minimum_tls_version
8+
- azure_check_for_autoscale_notifications
9+
- azure_kubernetes_api_version
10+
Enabled: true
11+
SectionCode: azure_baseline_reliability_monitoring
12+
Tags:
13+
baseline_category:
14+
- reliability
15+
type:
16+
- Baseline
17+
TracksDriftEvents: false

‎compliance/frameworks/baseline/reliability/root.yaml‎

Lines changed: 8 additions & 64 deletions
Original file line numberDiff line numberDiff line change
@@ -1,71 +1,15 @@
1-
ID: sre_reliability
2-
Title: "SRE Reliability"
1+
ID: baseline_reliability
2+
Title: "Baseline Reliability"
33
Description: "Reliability Framework aligns with SRE principles and the Well-Architected Framework, ensuring systems are resilient, highly available, and capable of recovering swiftly from failures."
44
AutoAssign: true
5-
Children: []
6-
Controls:
7-
# - aws_rds_db_instance_no_public_subnet
8-
- aws_use_aws_backup_service_in_use_for_amazon_rds
9-
- aws_rds_automated_backups_enabled
10-
- aws_use_io2_not_io1
11-
- aws_disable_public_ip_address_assignment_for_ec2_instances
12-
- aws_ec2_ami_too_old
13-
- aws_opensearch_dedicated_master_enabled
14-
- aws_opensearch_zone_awareness_enabled
15-
- aws_backtrack
16-
- aws_aurora_database_instance_accessibility
17-
- aws_enable_serverless_log_exports
18-
- aws_performance_insights
19-
- aws_rds_event_notifications
20-
- aws_rds_multi_az
21-
- aws_dynamodb_instances_have_backup_with_lifecyclepolicy_above_35_days
22-
- aws_dynamodb_instances_have_backup_withing_48_hours
23-
- aws_ebs_instances_have_backup_with_lifecyclepolicy_above_35_days
24-
- aws_ebs_instances_have_backup_withing_rpo_period
25-
- aws_ec2_instances_have_backup_with_lifecyclepolicy_above_35_days
26-
- aws_ec2_instances_have_backup_withing_48_hours
27-
- aws_efs_files_have_backup_with_lifecyclepolicy_above_35_days
28-
- aws_efs_files_have_backup_withing_48_hours
29-
- aws_rds_database_instances_have_a_minimum_acceptable_backup_policy
30-
- aws_rds_database_instances_must_have_a_minimum_acceptable_restore_time
31-
- aws_expired_ssl_tls_certificate
32-
- aws_configure_multiple_availability_zones_for_load_balancers
33-
- aws_kubernetes_cluster_version
34-
- aws_elbv2_alb_minimum_number_of_ec2_target_instances
35-
- aws_elbv2_glb_minimum_number_of_ec2_target_instances
36-
- aws_ec2_instance_termination_protection
37-
- aws_enable_deletion_protection
38-
- aws_elb_connection_draining_enabled
39-
- aws_elb_cross_zone_load_balancing_enabled
40-
- aws_check_for_amazon_ecs_service_placement_strategy
41-
- aws_enable_cloudtrail_logging_for_kubernetes_api_calls
42-
- aws_enable_cloudwatch_container_insights
43-
- aws_check_for_protected_amazon_backup_resource_types
44-
- aws_enable_cross_region_replication
45-
- azure_check_for_kubernetes_version
46-
- azure_disable_plain_ftp_deployment
47-
- azure_check_for_usage_of_managed_disk_volumes_for_virtual_machines
48-
- azure_recovery_service_vault_alert_for_job_failures_enabled
49-
- azure_check_for_sufficient_point_in_time_restore_pitr_backup_retention_period
50-
- azure_configure_minimum_tls_version
51-
- azure_check_for_configure_health_monitoring
52-
- azure_check_for_automatic_os_upgrades
53-
- azure_check_for_automatic_instance_repairs
54-
- azure_check_for_instance_termination_notifications_for_virtual_machine_scale_sets
55-
- azure_check_for_associated_load_balancers
56-
- azure_check_for_guest_level_diagnostics_for_virtual_machines
57-
- azure_enable_soft_delete_for_azure_blob_storage
58-
- azure_check_for_sufficient_soft_deleted_data_retention_period
59-
- azure_check_for_autoscale_notifications
60-
- azure_check_for_sufficient_daily_backup_retention_period
61-
- azure_check_for_sufficient_instant_restore_retention_period
62-
- azure_kubernetes_api_version
63-
- azure_enable_auto_failover_groups
5+
Children:
6+
- aws_baseline_reliability
7+
- azure_baseline_reliability
648
Enabled: true
65-
SectionCode: sre_reliability
9+
SectionCode: baseline_reliability
6610
Tags:
67-
score_category:
11+
baseline_category:
6812
- reliability
6913
type:
70-
- SCORE
14+
- Baseline
7115
TracksDriftEvents: false

0 commit comments

Comments
 (0)