Path Lines of Code aws-config-conformance-packs/AWS-Control-Tower-Detective-Guardrails.yaml 249 aws-config-conformance-packs/Operational-Best-Practices-For-NIST-800-181.yaml 1544 aws-config-conformance-packs/Operational-Best-Practices-for-ABS-CCIGv2-Material.yaml 1585 aws-config-conformance-packs/Operational-Best-Practices-for-ABS-CCIGv2-Standard.yaml 1476 aws-config-conformance-packs/Operational-Best-Practices-for-ACSC-Essential8.yaml 1431 aws-config-conformance-packs/Operational-Best-Practices-for-ACSC-ISM.yaml 1440 aws-config-conformance-packs/Operational-Best-Practices-for-AI-and-ML.yaml 162 aws-config-conformance-packs/Operational-Best-Practices-for-API-Gateway.yaml 78 aws-config-conformance-packs/Operational-Best-Practices-for-APRA-CPG-234.yaml 1561 aws-config-conformance-packs/Operational-Best-Practices-for-AWS-Backup.yaml 166 aws-config-conformance-packs/Operational-Best-Practices-for-AWS-Identity-and-Access-Management.yaml 291 aws-config-conformance-packs/Operational-Best-Practices-for-AWS-Well-Architected-Reliability-Pillar.yaml 398 aws-config-conformance-packs/Operational-Best-Practices-for-AWS-Well-Architected-Security-Pillar.yaml 1295 aws-config-conformance-packs/Operational-Best-Practices-for-Amazon-DynamoDB-with-Remediation.yaml 48 aws-config-conformance-packs/Operational-Best-Practices-for-Amazon-DynamoDB.yaml 95 aws-config-conformance-packs/Operational-Best-Practices-for-Amazon-S3-with-Remediation.yaml 192 aws-config-conformance-packs/Operational-Best-Practices-for-Amazon-S3.yaml 125 aws-config-conformance-packs/Operational-Best-Practices-for-Asset-Management.yaml 113 aws-config-conformance-packs/Operational-Best-Practices-for-BCP-and-DR.yaml 372 aws-config-conformance-packs/Operational-Best-Practices-for-BNM-RMiT.yaml 1559 aws-config-conformance-packs/Operational-Best-Practices-for-CCN-ENS-High.yaml 1298 aws-config-conformance-packs/Operational-Best-Practices-for-CCN-ENS-Low.yaml 1228 aws-config-conformance-packs/Operational-Best-Practices-for-CCN-ENS-Medium.yaml 1219 aws-config-conformance-packs/Operational-Best-Practices-for-CIS-AWS-FB-v1.3-Level1.yaml 490 aws-config-conformance-packs/Operational-Best-Practices-for-CIS-AWS-FB-v1.3-Level2.yaml 616 aws-config-conformance-packs/Operational-Best-Practices-for-CIS-AWS-v1.4-Level1.yaml 589 aws-config-conformance-packs/Operational-Best-Practices-for-CIS-AWS-v1.4-Level2.yaml 734 aws-config-conformance-packs/Operational-Best-Practices-for-CIS-Critical-Security-Controls-v8-IG1.yaml 931 aws-config-conformance-packs/Operational-Best-Practices-for-CIS-Critical-Security-Controls-v8-IG2.yaml 1295 aws-config-conformance-packs/Operational-Best-Practices-for-CIS-Critical-Security-Controls-v8-IG3.yaml 1315 aws-config-conformance-packs/Operational-Best-Practices-for-CIS-Top20.yaml 1067 aws-config-conformance-packs/Operational-Best-Practices-for-CIS.yaml 265 aws-config-conformance-packs/Operational-Best-Practices-for-CISA-Cyber-Essentials.yaml 1489 aws-config-conformance-packs/Operational-Best-Practices-for-CMMC-Level-1.yaml 854 aws-config-conformance-packs/Operational-Best-Practices-for-CMMC-Level-2.yaml 1384 aws-config-conformance-packs/Operational-Best-Practices-for-CMMC-Level-3.yaml 2643 aws-config-conformance-packs/Operational-Best-Practices-for-CMMC-Level-4.yaml 1555 aws-config-conformance-packs/Operational-Best-Practices-for-CMMC-Level-5.yaml 1555 aws-config-conformance-packs/Operational-Best-Practices-for-Compute-Services.yaml 339 aws-config-conformance-packs/Operational-Best-Practices-for-Data-Resiliency.yaml 260 aws-config-conformance-packs/Operational-Best-Practices-for-Database-Services.yaml 279 aws-config-conformance-packs/Operational-Best-Practices-for-Datalakes-and-Analytics-Services.yaml 285 aws-config-conformance-packs/Operational-Best-Practices-for-DevOps.yaml 107 aws-config-conformance-packs/Operational-Best-Practices-for-EC2.yaml 207 aws-config-conformance-packs/Operational-Best-Practices-for-ENISA-Cybersecurity-Guide.yaml 1027 aws-config-conformance-packs/Operational-Best-Practices-for-Encryption-and-Keys.yaml 331 aws-config-conformance-packs/Operational-Best-Practices-for-FDA-21CFR-Part-11.yaml 1353 aws-config-conformance-packs/Operational-Best-Practices-for-FFIEC.yaml 1569 aws-config-conformance-packs/Operational-Best-Practices-for-FedRAMP-Low.yaml 1484 aws-config-conformance-packs/Operational-Best-Practices-for-FedRAMP.yaml 1583 aws-config-conformance-packs/Operational-Best-Practices-for-HIPAA-Security.yaml 1566 aws-config-conformance-packs/Operational-Best-Practices-for-KISMS.yaml 1412 aws-config-conformance-packs/Operational-Best-Practices-for-Load-Balancing.yaml 122 aws-config-conformance-packs/Operational-Best-Practices-for-Logging.yaml 179 aws-config-conformance-packs/Operational-Best-Practices-for-MAS-Notice-655.yaml 782 aws-config-conformance-packs/Operational-Best-Practices-for-MAS-TRMG.yaml 1492 aws-config-conformance-packs/Operational-Best-Practices-for-Management-Governance-Services.yaml 215 aws-config-conformance-packs/Operational-Best-Practices-for-Monitoring.yaml 283 aws-config-conformance-packs/Operational-Best-Practices-for-NBC-TRMG.yaml 1505 aws-config-conformance-packs/Operational-Best-Practices-for-NCSC-CAF.yaml 1578 aws-config-conformance-packs/Operational-Best-Practices-for-NCSC-CloudSec-Principles.yaml 1453 aws-config-conformance-packs/Operational-Best-Practices-for-NERC-CIP.yaml 1288 aws-config-conformance-packs/Operational-Best-Practices-for-NIST-1800-25.yaml 1417 aws-config-conformance-packs/Operational-Best-Practices-for-NIST-800-171.yaml 1289 aws-config-conformance-packs/Operational-Best-Practices-for-NIST-800-172.yaml 770 aws-config-conformance-packs/Operational-Best-Practices-for-NIST-800-53-rev-4.yaml 1292 aws-config-conformance-packs/Operational-Best-Practices-for-NIST-800-53-rev-5.yaml 1524 aws-config-conformance-packs/Operational-Best-Practices-for-NIST-CSF.yaml 1398 aws-config-conformance-packs/Operational-Best-Practices-for-NIST-Privacy-Framework.yaml 1506 aws-config-conformance-packs/Operational-Best-Practices-for-NYDFS-23-NYCRR-500.yaml 1360 aws-config-conformance-packs/Operational-Best-Practices-for-NZISM.yaml 973 aws-config-conformance-packs/Operational-Best-Practices-for-Networking-Services.yaml 316 aws-config-conformance-packs/Operational-Best-Practices-for-PCI-DSS.yaml 1319 aws-config-conformance-packs/Operational-Best-Practices-for-Publicly-Accessible-Resources.yaml 230 aws-config-conformance-packs/Operational-Best-Practices-for-RBI-Basic-Cyber-Security-Framework.yaml 1137 aws-config-conformance-packs/Operational-Best-Practices-for-RBI-MasterDirection.yaml 1303 aws-config-conformance-packs/Operational-Best-Practices-for-Security-Services.yaml 672 aws-config-conformance-packs/Operational-Best-Practices-for-Serverless.yaml 234 aws-config-conformance-packs/Operational-Best-Practices-for-Storage-Services.yaml 175 aws-config-conformance-packs/custom-conformance-pack.yaml 46 java/src/main/java/com/amazonaws/services/config/samplerules/DbInstanceBackupParameters.java 139 java/src/main/java/com/amazonaws/services/config/samplerules/DesiredInstanceTenancy.java 125 java/src/main/java/com/amazonaws/services/config/samplerules/RootAccountMFAEnabled.java 67 java/src/main/java/com/amazonaws/services/config/samplerules/exception/FunctionExecutionException.java 7 node/iam_access_key_rotation-triggered.js 59 node/iam_mfa_require-triggered.js 54 node/instance_desired_tenancy-triggered.js 55 node/rds_db_instance_encrypted.js 62 python-rdklib/AMI_DEPRECATED_CHECK/AMI_DEPRECATED_CHECK.py 125 python-rdklib/EC2_INSTANCE_EBS_VOLUME_TAGS_MATCH/config_rule/config-version/EC2_INSTANCE_EBS_VOLUME_TAGS_MATCH/EC2_INSTANCE_EBS_VOLUME_TAGS_MATCH.py 79 python-rdklib/EC2_INSTANCE_EBS_VOLUME_TAGS_MATCH/config_rule/ec2_version/EC2_INSTANCE_EBS_VOLUME_TAGS_MATCH/EC2_INSTANCE_EBS_VOLUME_TAGS_MATCH.py 70 python-rdklib/EC2_INSTANCE_EBS_VOLUME_TAGS_MATCH/ssm_automation/ec2_tag_volumes_ssm_document_executeScript.yaml 105 python-rdklib/SECURITYHUB_ENABLED/SECURITYHUB_ENABLED.py 22 python/' RDK parameters.json for AWS Managed Config Rules/EC2_INSTANCE_NO_PUBLIC_IP/EC2_INSTANCE_NO_PUBLIC_IP.py 229 python/ALB_HTTP_TO_HTTPS_REDIRECTION_CHECK/ALB_HTTP_TO_HTTPS_REDIRECTION_CHECK.py 317 python/AMI_NOT_PUBLIC_CHECK/AMI_NOT_PUBLIC_CHECK.py 278 python/AMI_OUTDATED_CHECK/AMI_OUTDATED_CHECK.py 366 python/AMI_OWNERID_CHECK/AMI_OWNERID_CHECK.py 279 python/API_GW_AUTHORIZER_IN_PLACE/API_GW_AUTHORIZER_IN_PLACE.py 296 python/API_GW_CACHE_ENABLED_AND_ENCRYPTED/API_GW_CACHE_ENABLED_AND_ENCRYPTED.py 244 python/API_GW_ENDPOINT_TYPE_CHECK/API_GW_ENDPOINT_TYPE_CHECK.py 233 python/API_GW_EXECUTION_LOGGING_ENABLED/API_GW_EXECUTION_LOGGING_ENABLED.py 274 python/API_GW_NOT_EDGE_OPTIMISED/API_GW_NOT_EDGE_OPTIMISED.py 286 python/API_GW_PRIVATE_RESTRICTED/API_GW_PRIVATE_RESTRICTED.py 375 python/API_GW_RESTRICTED_IP/API_GW_RESTRICTED_IP.py 366 python/BUSINESS_SUPPORT_OR_ABOVE_ENABLED/BUSINESS_SUPPORT_OR_ABOVE_ENABLED.py 325 python/CLOUDFRONT_LOGGING_ENABLED/CLOUDFRONT_LOGGING_ENABLED.py 252 python/CLOUDFRONT_VIEWER_POLICY_HTTPS/CLOUDFRONT_VIEWER_POLICY_HTTPS.py 233 python/CLOUDFRONT_WEBACL_CHECK/CLOUDFRONT_WEBACL_CHECK.py 244 python/CLOUDTRAIL_ENABLED_V2/CLOUDTRAIL_ENABLED_V2.py 401 python/CLOUDTRAIL_S3_DATAEVENTS_ENABLED/CLOUDTRAIL_S3_DATAEVENTS_ENABLED.py 277 python/CLOUDWATCH_LOG_GROUP_ENCRYPTED/CLOUDWATCH_LOG_GROUP_ENCRYPTED.py 256 python/DMS_REPLICATION_NOT_PUBLIC/DMS_REPLICATION_NOT_PUBLIC.py 241 python/DYNAMODB_ENCRYPTED_CUSTOM/DYNAMODB_ENCRYPTED.py 283 python/EBS_ENCRYPTED_VOLUMES_V2/EBS_ENCRYPTED_VOLUMES_V2.py 485 python/EBS_SNAPSHOT_PUBLIC_RESTORABLE_CHECK/EBS_SNAPSHOT_PUBLIC_RESTORABLE_CHECK.py 277 python/EC2_INSTANCE_NO_PUBLIC_IP/EC2_INSTANCE_NO_PUBLIC_IP.py 229 python/EC2_SECURITY_GROUP_BADINGRESS/EC2_SECURITY_GROUP_BADINGRESS.py 289 python/EC2_SECURITY_GROUP_NOT_USED/EC2_SECURITY_GROUP_NOT_USED.py 304 python/EC2_TAG_MATCHES_INSTANCE_PROFILE_NAME/EC2_TAG_MATCHES_INSTANCE_PROFILE_NAME.py 286 python/ECR_REPOSITORY_SCAN_ON_PUSH_CHECK/ECR_REPOSITORY_SCAN_ON_PUSH_CHECK.py 303 python/ECS_AWSLOGS_CHECK/ECS_AWSLOGS_CHECK.py 268 python/ECS_ECRIMAGE_CHECK/ECS_ECRIMAGE_CHECK.py 275 python/EFS_ENCRYPTED_CHECK/EFS_ENCRYPTED_CHECK.py 258 python/EKS_LOGGING_CHECK/EKS_LOGGING_CHECK.py 257 python/EKS_PUBLIC_ACCESS/EKS_PUBLIC_ACCESS.py 256 python/ELASTICACHE_REDIS_CLUSTER_AUTO_BACKUP_CHECK/ELASTICACHE_REDIS_CLUSTER_AUTO_BACKUP_CHECK.py 311 python/ELASTICSEARCH_ENCRYPTED_AT_REST/ELASTICSEARCH_ENCRYPTED_AT_REST.py 250 python/ELASTICSEARCH_IN_VPC_ONLY/ELASTICSEARCH_IN_VPC_ONLY.py 279 python/ELB_ALB_PREDEFINED_SSL_CHECK/ELB_ALB_PREDEFINED_SSL_CHECK.py 297 python/ELB_DELETION_PROTECTION_ENABLED/ELB_DELETION_PROTECTION_ENABLED.py 255 python/EMR_KERBEROS_ENABLED/EMR_KERBEROS_ENABLED.py 297 python/EMR_MASTER_NO_PUBLIC_IP/EMR_MASTER_NO_PUBLIC_IP.py 282 python/EMR_SECURITY_GROUPS_RESTRICTED/EMR_SECURITY_GROUPS_RESTRICTED.py 404 python/ENTERPRISE_SUPPORT_PLAN_ENABLED/ENTERPRISE_SUPPORT_PLAN_ENABLED.py 277 python/GUARDDUTY_UNTREATED_FINDINGS/GUARDDUTY_UNTREATED_FINDINGS.py 306 python/IAM_ACCESS_KEY_ROTATED/IAM_ACCESS_KEY_ROTATED.py 342 python/IAM_GROUP_NO_POLICY_FULL_STAR/IAM_GROUP_NO_POLICY_FULL_STAR.py 304 python/IAM_IP_RESTRICTION/IAM_IP_RESTRICTION.py 559 python/IAM_NO_USER/IAM_NO_USER.py 281 python/IAM_POLICY_REQUIRED/IAM_POLICY_REQUIRED.py 271 python/IAM_ROLE_NO_POLICY_FULL_STAR/IAM_ROLE_NO_POLICY_FULL_STAR.py 304 python/IAM_USER_MATCHES_REGEX_PATTERN/IAM_USER_MATCHES_REGEX_PATTERN.py 269 python/IAM_USER_MFA_ENABLED/IAM_USER_MFA_ENABLED.py 373 python/IAM_USER_NO_POLICY_FULL_STAR/IAM_USER_NO_POLICY_FULL_STAR.py 304 python/IAM_USER_PERMISSION_BOUNDARY_CHECK/IAM_USER_PERMISSION_BOUNDARY_CHECK.py 269 python/IAM_USER_USED_LAST_90_DAYS/IAM_USER_USED_LAST_90_DAYS.py 392 python/INSTANCE_PROFILE_HAVE_DEFINED_POLICIES/INSTANCE_PROFILE_HAVE_DEFINED_POLICIES.py 248 python/INTERNET_GATEWAY_AUTHORIZED_ONLY/INTERNET_GATEWAY_AUTHORIZED_ONLY.py 268 python/KMS_KEYS_TO_NOT_DELETE/KMS_KEYS_TO_NOT_DELETE.py 317 python/LAMBDA_CODE_IS_VERSIONED/LAMBDA_CODE_IS_VERSIONED.py 288 python/LAMBDA_CONCURRENCY_CHECK/LAMBDA_CONCURRENCY_CHECK.py 342 python/LAMBDA_DLQ_CHECK/LAMBDA_DLQ_CHECK.py 284 python/LAMBDA_INSIDE_VPC/LAMBDA_INSIDE_VPC.py 240 python/LAMBDA_ROLE_ALLOWED_ON_LOGGING/LAMBDA_ROLE_ALLOWED_ON_LOGGING.py 264 python/RDS_ENHANCED_MONITORING_ENABLED/RDS_ENHANCED_MONITORING_ENABLED.py 271 python/REDSHIFT_CLUSTER_PUBLIC_ACCESS_CHECK/REDSHIFT_CLUSTER_PUBLIC_ACCESS_CHECK.py 228 python/REST_API_GW_CUSTOMDOMAIN_CHECK/REST_API_GW_CUSTOMDOMAIN_CHECK.py 273 python/ROOT_NO_ACCESS_KEY/ROOT_NO_ACCESS_KEY.py 242 python/S3_BUCKET_NAMING_CONVENTION/S3_BUCKET_NAMING_CONVENTION.py 268 python/S3_PUBLIC_ACCESS_SETTINGS_FOR_ACCOUNT/S3_PUBLIC_ACCESS_SETTINGS_FOR_ACCOUNT.PY 311 python/S3_PUBLIC_ACCESS_SETTINGS_FOR_ACCOUNT/S3_PUBLIC_ACCESS_SETTINGS_FOR_ACCOUNT_TEST.py 158 python/S3_VPC_ENDPOINT_ENABLED/S3_VPC_ENDPOINT_ENABLED.py 291 python/SAGEMAKER_ENDPOINT_CONFIG_KMS_KEY_CONFIGURED/SAGEMAKER_ENDPOINT_CONFIG_KMS_KEY_CONFIGURED.py 263 python/SAGEMAKER_NOTEBOOK_KMS_CONFIGURED/SAGEMAKER_NOTEBOOK_KMS_CONFIGURED.py 263 python/SAGEMAKER_NOTEBOOK_NO_DIRECT_INTERNET_ACCESS/SAGEMAKER_NOTEBOOK_NO_DIRECT_INTERNET_ACCESS.py 275 python/SECRETSMANAGER_MAX_SECRET_AGE/SECRETSMANAGER_MAX_SECRET_AGE.py 265 python/SHIELD_ADVANCED_ENABLED_AUTORENEW/SHIELD_ADVANCED_ENABLED_AUTORENEW.py 269 python/SHIELD_DRT_ACCESS/SHIELD_DRT_ACCESS.py 243 python/SNS_ENCRYPTED_TOPIC_CHECK/SNS_ENCRYPTED_TOPIC_CHECK.py 318 python/SNS_TOPIC_EMAIL_SUB_IN_DOMAINS/SNS_TOPIC_EMAIL_SUB_IN_DOMAINS.py 262 python/SQS_ENCRYPTION_CHECK/SQS_ENCRYPTION_CHECK.py 277 python/SQS_PUBLIC_ACCESS_CHECK/SQS_PUBLIC_ACCESS_CHECK.py 286 python/SQS_TRANSIT_ENCRYPTION_CHECK/SQS_TRANSIT_ENCRYPTION_CHECK.py 286 python/VPC_ENDPOINT_DEFAULT_POLICY/VPC_ENDPOINT_DEFAULT_POLICY.py 334 python/VPC_ENDPOINT_MANUAL_ACCEPTANCE/VPC_ENDPOINT_MANUAL_ACCEPTANCE.py 270 python/VPC_FLOW_LOGS_ENABLED_CUSTOM/VPC_FLOW_LOGS_ENABLED_CUSTOM.py 375 python/VPC_SG_OPEN_ONLY_TO_AUTHORIZED_PORTS/VPC_SG_OPEN_ONLY_TO_AUTHORIZED_PORTS.py 355 python/VPC_VPN_2_TUNNELS_UP/VPC_VPN_2_TUNNELS_UP.py 263 python/WAFV2_WEBACL_LOGGING_ENABLED/WAFV2_WEBACL_LOGGING_ENABLED.py 275 python/cloudtrail_encrypted.py 69 python/cloudtrail_lfi_activated.py 40 python/config_enabled.py 39 python/config_rules_exist.py 46 python/ec2-exposed-instance.py 86 python/ec2_desired_instance_type.py 34 python/ec2_desired_lifecycle_spot.py 34 python/ec2_launch_wizard_security_group_prohibited.py 41 python/ec2_no_internet_access.py 104 python/ec2_require_ebs_snapshots_for_volumes.py 112 python/ec2_require_security_group_by_tag.py 40 python/ec2_require_tags_with_valid_values.py 74 python/ec2_security_group_ingress.py 114 python/ec2_security_group_port_range_all_prohibited.py 41 python/ec2_security_group_protocol_all_prohibited.py 41 python/ec2_vpc_public_subnet.py 57 python/iam_mfa_for_console_access.py 89 python/iam_policy_exists.py 40 python/iam_unused_keys.py 62 python/lambda_require_tags_with_valid_values.py 77 python/rds_desired_instance_type.py 34 python/rds_vpc_public_subnet.py 60 python/s3_bucket_default_encryption_enabled.py 78 python/s3_bucket_policy_prohibited.py 47