templates/AwsBiotechBlueprint.template.quickstart.yml [951:996]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
      DeliveryS3KeyPrefix: Operational-Best-Practices-For-Amazon-S3
      TemplateBody: "###############################################################################################\n\
        #\n#   Conformance Pack:\n#     Operational Best Practices for Amazon S3\n\
        #\n#    This pack contains AWS Config rules based on the best practice guidelines\
        \ for Amazon S3.\n#\n###############################################################################################\n\
        \nResources:\n    S3BucketPublicReadProhibited:\n      Type: AWS::Config::ConfigRule\n\
        \      Properties:\n        ConfigRuleName: S3BucketPublicReadProhibited\n\
        \        Description: >- \n          Checks that your Amazon S3 buckets do\
        \ not allow public read access.\n          The rule checks the Block Public\
        \ Access settings, the bucket policy, and the\n          bucket access control\
        \ list (ACL).\n        Scope:\n          ComplianceResourceTypes:\n      \
        \    - \"AWS::S3::Bucket\"\n        Source:\n          Owner: AWS\n      \
        \    SourceIdentifier: S3_BUCKET_PUBLIC_READ_PROHIBITED\n        MaximumExecutionFrequency:\
        \ Six_Hours\n    S3BucketPublicWriteProhibited: \n      Type: \"AWS::Config::ConfigRule\"\
        \n      Properties: \n        ConfigRuleName: S3BucketPublicWriteProhibited\n\
        \        Description: \"Checks that your Amazon S3 buckets do not allow public\
        \ write access. The rule checks the Block Public Access settings, the bucket\
        \ policy, and the bucket access control list (ACL).\"\n        Scope: \n \
        \         ComplianceResourceTypes: \n          - \"AWS::S3::Bucket\"\n   \
        \     Source: \n          Owner: AWS\n          SourceIdentifier: S3_BUCKET_PUBLIC_WRITE_PROHIBITED\n\
        \        MaximumExecutionFrequency: Six_Hours\n    S3BucketReplicationEnabled:\
        \ \n      Type: \"AWS::Config::ConfigRule\"\n      Properties: \n        ConfigRuleName:\
        \ S3BucketReplicationEnabled\n        Description: \"Checks whether the Amazon\
        \ S3 buckets have cross-region replication enabled.\"\n        Scope: \n \
        \         ComplianceResourceTypes: \n          - \"AWS::S3::Bucket\"\n   \
        \     Source: \n          Owner: AWS\n          SourceIdentifier: S3_BUCKET_REPLICATION_ENABLED\n\
        \    S3BucketSSLRequestsOnly: \n      Type: \"AWS::Config::ConfigRule\"\n\
        \      Properties: \n        ConfigRuleName: S3BucketSSLRequestsOnly\n   \
        \     Description: \"Checks whether S3 buckets have policies that require\
        \ requests to use Secure Socket Layer (SSL).\"\n        Scope: \n        \
        \  ComplianceResourceTypes: \n          - \"AWS::S3::Bucket\"\n        Source:\
        \ \n          Owner: AWS\n          SourceIdentifier: S3_BUCKET_SSL_REQUESTS_ONLY\n\
        \    ServerSideReplicationEnabled: \n      Type: \"AWS::Config::ConfigRule\"\
        \n      Properties: \n        ConfigRuleName: ServerSideReplicationEnabled\n\
        \        Description: \"Checks that your Amazon S3 bucket either has S3 default\
        \ encryption enabled or that the S3 bucket policy explicitly denies put-object\
        \ requests without server side encryption.\"\n        Scope: \n          ComplianceResourceTypes:\
        \ \n          - \"AWS::S3::Bucket\"\n        Source: \n          Owner: AWS\n\
        \          SourceIdentifier: S3_BUCKET_SERVER_SIDE_ENCRYPTION_ENABLED\n  \
        \  S3BucketLoggingEnabled: \n      Type: \"AWS::Config::ConfigRule\"\n   \
        \   Properties: \n        ConfigRuleName: S3BucketLoggingEnabled\n       \
        \ Description: \"Checks whether logging is enabled for your S3 buckets.\"\n\
        \        Scope: \n          ComplianceResourceTypes: \n          - \"AWS::S3::Bucket\"\
        \n        Source: \n          Owner: AWS\n          SourceIdentifier: S3_BUCKET_LOGGING_ENABLED"
    Type: AWS::Config::ConformancePack
  ConfigPacksCPOperationalBestPracticesforHIPAASecurity01583019:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



templates/AwsBiotechBlueprint.template.yml [786:831]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
      DeliveryS3KeyPrefix: Operational-Best-Practices-For-Amazon-S3
      TemplateBody: "###############################################################################################\n\
        #\n#   Conformance Pack:\n#     Operational Best Practices for Amazon S3\n\
        #\n#    This pack contains AWS Config rules based on the best practice guidelines\
        \ for Amazon S3.\n#\n###############################################################################################\n\
        \nResources:\n    S3BucketPublicReadProhibited:\n      Type: AWS::Config::ConfigRule\n\
        \      Properties:\n        ConfigRuleName: S3BucketPublicReadProhibited\n\
        \        Description: >- \n          Checks that your Amazon S3 buckets do\
        \ not allow public read access.\n          The rule checks the Block Public\
        \ Access settings, the bucket policy, and the\n          bucket access control\
        \ list (ACL).\n        Scope:\n          ComplianceResourceTypes:\n      \
        \    - \"AWS::S3::Bucket\"\n        Source:\n          Owner: AWS\n      \
        \    SourceIdentifier: S3_BUCKET_PUBLIC_READ_PROHIBITED\n        MaximumExecutionFrequency:\
        \ Six_Hours\n    S3BucketPublicWriteProhibited: \n      Type: \"AWS::Config::ConfigRule\"\
        \n      Properties: \n        ConfigRuleName: S3BucketPublicWriteProhibited\n\
        \        Description: \"Checks that your Amazon S3 buckets do not allow public\
        \ write access. The rule checks the Block Public Access settings, the bucket\
        \ policy, and the bucket access control list (ACL).\"\n        Scope: \n \
        \         ComplianceResourceTypes: \n          - \"AWS::S3::Bucket\"\n   \
        \     Source: \n          Owner: AWS\n          SourceIdentifier: S3_BUCKET_PUBLIC_WRITE_PROHIBITED\n\
        \        MaximumExecutionFrequency: Six_Hours\n    S3BucketReplicationEnabled:\
        \ \n      Type: \"AWS::Config::ConfigRule\"\n      Properties: \n        ConfigRuleName:\
        \ S3BucketReplicationEnabled\n        Description: \"Checks whether the Amazon\
        \ S3 buckets have cross-region replication enabled.\"\n        Scope: \n \
        \         ComplianceResourceTypes: \n          - \"AWS::S3::Bucket\"\n   \
        \     Source: \n          Owner: AWS\n          SourceIdentifier: S3_BUCKET_REPLICATION_ENABLED\n\
        \    S3BucketSSLRequestsOnly: \n      Type: \"AWS::Config::ConfigRule\"\n\
        \      Properties: \n        ConfigRuleName: S3BucketSSLRequestsOnly\n   \
        \     Description: \"Checks whether S3 buckets have policies that require\
        \ requests to use Secure Socket Layer (SSL).\"\n        Scope: \n        \
        \  ComplianceResourceTypes: \n          - \"AWS::S3::Bucket\"\n        Source:\
        \ \n          Owner: AWS\n          SourceIdentifier: S3_BUCKET_SSL_REQUESTS_ONLY\n\
        \    ServerSideReplicationEnabled: \n      Type: \"AWS::Config::ConfigRule\"\
        \n      Properties: \n        ConfigRuleName: ServerSideReplicationEnabled\n\
        \        Description: \"Checks that your Amazon S3 bucket either has S3 default\
        \ encryption enabled or that the S3 bucket policy explicitly denies put-object\
        \ requests without server side encryption.\"\n        Scope: \n          ComplianceResourceTypes:\
        \ \n          - \"AWS::S3::Bucket\"\n        Source: \n          Owner: AWS\n\
        \          SourceIdentifier: S3_BUCKET_SERVER_SIDE_ENCRYPTION_ENABLED\n  \
        \  S3BucketLoggingEnabled: \n      Type: \"AWS::Config::ConfigRule\"\n   \
        \   Properties: \n        ConfigRuleName: S3BucketLoggingEnabled\n       \
        \ Description: \"Checks whether logging is enabled for your S3 buckets.\"\n\
        \        Scope: \n          ComplianceResourceTypes: \n          - \"AWS::S3::Bucket\"\
        \n        Source: \n          Owner: AWS\n          SourceIdentifier: S3_BUCKET_LOGGING_ENABLED"
    Type: AWS::Config::ConformancePack
  ConfigPacksCPOperationalBestPracticesforHIPAASecurity01583019:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



