file 1 file 2 # same commits # commits file 1 # commits file 2 src/nag-pack.ts src/index.ts 3 7 11 src/rules/apigw/APIGWAccessLogging.ts src/nag-pack.ts 3 3 7 src/rules/apigw/APIGWAssociatedWithWAF.ts src/nag-pack.ts 3 3 7 src/rules/apigw/APIGWAssociatedWithWAF.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/apigw/APIGWAuthorization.ts src/nag-pack.ts 3 3 7 src/rules/apigw/APIGWAuthorization.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/apigw/APIGWAuthorization.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts src/nag-pack.ts 3 3 7 src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/apigw/APIGWExecutionLoggingEnabled.ts src/nag-pack.ts 3 3 7 src/rules/apigw/APIGWExecutionLoggingEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/apigw/APIGWExecutionLoggingEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/apigw/APIGWExecutionLoggingEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/apigw/APIGWExecutionLoggingEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/apigw/APIGWRequestValidation.ts src/nag-pack.ts 3 3 7 src/rules/apigw/APIGWRequestValidation.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/apigw/APIGWRequestValidation.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/apigw/APIGWRequestValidation.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/apigw/APIGWRequestValidation.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/apigw/APIGWRequestValidation.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/apigw/APIGWSSLEnabled.ts src/nag-pack.ts 3 3 7 src/rules/apigw/APIGWSSLEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/apigw/APIGWSSLEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/apigw/APIGWSSLEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/apigw/APIGWSSLEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/apigw/APIGWSSLEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/apigw/APIGWSSLEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/apigw/APIGWXrayEnabled.ts src/nag-pack.ts 3 3 7 src/rules/apigw/APIGWXrayEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/apigw/APIGWXrayEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/apigw/APIGWXrayEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/apigw/APIGWXrayEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/apigw/APIGWXrayEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/apigw/APIGWXrayEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/apigw/APIGWXrayEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/appsync/AppSyncGraphQLRequestLogging.ts src/nag-pack.ts 3 3 7 src/rules/appsync/AppSyncGraphQLRequestLogging.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/appsync/AppSyncGraphQLRequestLogging.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/appsync/AppSyncGraphQLRequestLogging.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/appsync/AppSyncGraphQLRequestLogging.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/appsync/AppSyncGraphQLRequestLogging.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/appsync/AppSyncGraphQLRequestLogging.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/appsync/AppSyncGraphQLRequestLogging.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/appsync/AppSyncGraphQLRequestLogging.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts src/nag-pack.ts 3 3 7 src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts src/nag-pack.ts 3 3 7 src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts src/nag-pack.ts 3 3 7 src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupHealthCheck.ts src/nag-pack.ts 3 3 7 src/rules/autoscaling/AutoScalingGroupHealthCheck.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupHealthCheck.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupHealthCheck.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupHealthCheck.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupHealthCheck.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupHealthCheck.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupHealthCheck.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupHealthCheck.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupHealthCheck.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupHealthCheck.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupHealthCheck.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupHealthCheck.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts src/nag-pack.ts 3 3 7 src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts src/nag-pack.ts 3 3 7 src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts src/nag-pack.ts 3 3 7 src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/nag-pack.ts 3 3 7 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/nag-pack.ts 3 3 7 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/nag-pack.ts 3 3 7 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/nag-pack.ts 3 3 7 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/nag-pack.ts 3 3 7 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/nag-pack.ts 3 3 7 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/nag-pack.ts 3 3 7 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/nag-pack.ts 3 3 7 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/nag-pack.ts 3 3 7 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchAlarmAction.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/nag-pack.ts 3 3 7 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/nag-pack.ts 3 3 7 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/nag-pack.ts 3 3 7 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/nag-pack.ts 3 3 7 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/nag-pack.ts 3 3 7 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/codebuild/CodeBuildProjectManagedImages.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/nag-pack.ts 3 3 7 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/nag-pack.ts 3 3 7 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/nag-pack.ts 3 3 7 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/nag-pack.ts 3 3 7 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/nag-pack.ts 3 3 7 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/cognito/CognitoUserPoolMFA.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/nag-pack.ts 3 3 7 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/nag-pack.ts 3 3 7 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/nag-pack.ts 3 3 7 src/rules/dms/DMSReplicationNotPublic.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/dms/DMSReplicationNotPublic.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/nag-pack.ts 3 3 7 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/nag-pack.ts 3 3 7 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/nag-pack.ts 3 3 7 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/documentdb/DocumentDBClusterLogExports.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/nag-pack.ts 3 3 7 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/nag-pack.ts 3 3 7 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/nag-pack.ts 3 3 7 src/rules/dynamodb/DAXEncrypted.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/dynamodb/DAXEncrypted.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/nag-pack.ts 3 3 7 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/nag-pack.ts 3 3 7 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/dynamodb/DynamoDBInBackupPlan.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/nag-pack.ts 3 3 7 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/dynamodb/DynamoDBPITREnabled.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/nag-pack.ts 3 3 7 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ec2/EC2EBSInBackupPlan.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/nag-pack.ts 3 3 7 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/ec2/EC2EBSOptimizedInstance.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/nag-pack.ts 3 3 7 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/ec2/EC2EBSVolumeEncrypted.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/nag-pack.ts 3 3 7 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/nag-pack.ts 3 3 7 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/ec2/EC2InstanceNoPublicIp.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/nag-pack.ts 3 3 7 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceProfileAttached.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/nag-pack.ts 3 3 7 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/ec2/EC2InstanceTerminationProtection.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/nag-pack.ts 3 3 7 src/rules/ec2/EC2InstancesInVPC.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/ec2/EC2InstancesInVPC.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/nag-pack.ts 3 3 7 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/ec2/EC2RestrictedCommonPorts.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/nag-pack.ts 3 3 7 src/rules/ec2/EC2RestrictedInbound.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/ec2/EC2RestrictedInbound.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/nag-pack.ts 3 3 7 src/rules/ec2/EC2RestrictedSSH.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/ec2/EC2RestrictedSSH.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/nag-pack.ts 3 3 7 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/ec2/EC2SecurityGroupDescription.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/nag-pack.ts 3 3 7 src/rules/ecr/ECROpenAccess.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/ecr/ECROpenAccess.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/nag-pack.ts 3 3 7 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/nag-pack.ts 3 3 7 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionContainerLogging.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/nag-pack.ts 3 3 7 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/nag-pack.ts 3 3 7 src/rules/efs/EFSEncrypted.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/efs/EFSEncrypted.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/nag-pack.ts 3 3 7 src/rules/efs/EFSInBackupPlan.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/efs/EFSInBackupPlan.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/nag-pack.ts 3 3 7 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterInVPC.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/nag-pack.ts 3 3 7 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/nag-pack.ts 3 3 7 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/nag-pack.ts 3 3 7 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/nag-pack.ts 3 3 7 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/nag-pack.ts 3 3 7 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/nag-pack.ts 3 3 7 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/nag-pack.ts 3 3 7 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/nag-pack.ts 3 3 7 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/nag-pack.ts 3 3 7 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/nag-pack.ts 3 3 7 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/nag-pack.ts 3 3 7 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/elb/ALBHttpToHttpsRedirection.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/nag-pack.ts 3 3 7 src/rules/elb/ALBWAFEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/elb/ALBWAFEnabled.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/nag-pack.ts 3 3 7 src/rules/elb/CLBConnectionDraining.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/elb/CLBConnectionDraining.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/nag-pack.ts 3 3 7 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/elb/CLBNoInboundHttpHttps.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/nag-pack.ts 3 3 7 src/rules/elb/ELBACMCertificateRequired.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/elb/ELBACMCertificateRequired.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/nag-pack.ts 3 3 7 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/nag-pack.ts 3 3 7 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/elb/ELBDeletionProtectionEnabled.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/nag-pack.ts 3 3 7 src/rules/elb/ELBLoggingEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/elb/ELBLoggingEnabled.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/nag-pack.ts 3 3 7 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/elb/ELBTlsHttpsListenersOnly.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/nag-pack.ts 3 3 7 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/elb/ELBv2ACMCertificateRequired.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/nag-pack.ts 3 3 7 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/nag-pack.ts 3 3 7 src/rules/emr/EMRKerberosEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/emr/EMRKerberosEnabled.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/nag-pack.ts 3 3 7 src/rules/emr/EMRS3AccessLogging.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/emr/EMRS3AccessLogging.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/nag-pack.ts 3 3 7 src/rules/iam/IAMGroupHasUsers.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/iam/IAMGroupHasUsers.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/nag-pack.ts 3 3 7 src/rules/iam/IAMNoInlinePolicy.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/iam/IAMNoInlinePolicy.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/nag-pack.ts 3 3 7 src/rules/iam/IAMNoManagedPolicies.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/iam/IAMNoManagedPolicies.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/nag-pack.ts 3 3 7 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/iam/IAMNoWildcardPermissions.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/nag-pack.ts 3 3 7 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/nag-pack.ts 3 3 7 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/nag-pack.ts 3 3 7 src/rules/iam/IAMUserGroupMembership.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/iam/IAMUserGroupMembership.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/nag-pack.ts 3 3 7 src/rules/iam/IAMUserNoPolicies.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/iam/IAMUserNoPolicies.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/nag-pack.ts 3 3 7 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/nag-pack.ts 3 3 7 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/kinesis/KinesisDataFirehoseSSE.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/nag-pack.ts 3 3 7 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/nag-pack.ts 3 3 7 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/kinesis/KinesisDataStreamSSE.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/nag-pack.ts 3 3 7 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/kms/KMSBackingKeyRotationEnabled.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/nag-pack.ts 3 3 7 src/rules/lambda/LambdaConcurrency.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/lambda/LambdaConcurrency.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/nag-pack.ts 3 3 7 src/rules/lambda/LambdaDLQ.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/lambda/LambdaDLQ.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/nag-pack.ts 3 3 7 src/rules/lambda/LambdaInsideVPC.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/lambda/LambdaInsideVPC.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/nag-pack.ts 3 3 7 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/nag-pack.ts 3 3 7 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/mediastore/MediaStoreContainerAccessLogging.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/nag-pack.ts 3 3 7 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/mediastore/MediaStoreContainerCORSPolicy.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/nag-pack.ts 3 3 7 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/nag-pack.ts 3 3 7 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/nag-pack.ts 3 3 7 src/rules/msk/MSKBrokerLogging.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/msk/MSKBrokerLogging.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/nag-pack.ts 3 3 7 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/msk/MSKBrokerToBrokerTLS.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/nag-pack.ts 3 3 7 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/msk/MSKClientToBrokerTLS.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/nag-pack.ts 3 3 7 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/nag-pack.ts 3 3 7 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/nag-pack.ts 3 3 7 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/neptune/NeptuneClusterEncryptionAtRest.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/nag-pack.ts 3 3 7 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterIAMAuth.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/nag-pack.ts 3 3 7 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/neptune/NeptuneClusterMultiAZ.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/nag-pack.ts 3 3 7 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/opensearch/OpenSearchAllowlistedIPs.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/nag-pack.ts 3 3 7 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchDedicatedMasterNode.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/nag-pack.ts 3 3 7 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/opensearch/OpenSearchEncryptedAtRest.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/nag-pack.ts 3 3 7 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/nag-pack.ts 3 3 7 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchInVPCOnly.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/nag-pack.ts 3 3 7 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/nag-pack.ts 3 3 7 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/nag-pack.ts 3 3 7 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/nag-pack.ts 3 3 7 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts 3 3 3 src/rules/opensearch/OpenSearchZoneAwareness.ts src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/nag-pack.ts 3 3 7 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts 3 3 3 src/rules/quicksight/QuicksightSSLConnections.ts src/rules/opensearch/OpenSearchZoneAwareness.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/nag-pack.ts 3 3 7 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/opensearch/OpenSearchZoneAwareness.ts 3 3 3 src/rules/rds/AuroraMySQLBacktrack.ts src/rules/quicksight/QuicksightSSLConnections.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/nag-pack.ts 3 3 7 src/rules/rds/AuroraMySQLLogging.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/opensearch/OpenSearchZoneAwareness.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/quicksight/QuicksightSSLConnections.ts 3 3 3 src/rules/rds/AuroraMySQLLogging.ts src/rules/rds/AuroraMySQLBacktrack.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/nag-pack.ts 3 3 7 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/opensearch/OpenSearchZoneAwareness.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/quicksight/QuicksightSSLConnections.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/rds/AuroraMySQLBacktrack.ts 3 3 3 src/rules/rds/AuroraMySQLPostgresIAMAuth.ts src/rules/rds/AuroraMySQLLogging.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/nag-pack.ts 3 3 7 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/opensearch/OpenSearchZoneAwareness.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/quicksight/QuicksightSSLConnections.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/rds/AuroraMySQLBacktrack.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/rds/AuroraMySQLLogging.ts 3 3 3 src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts src/rules/rds/AuroraMySQLPostgresIAMAuth.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/nag-pack.ts 3 3 7 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/opensearch/OpenSearchZoneAwareness.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/quicksight/QuicksightSSLConnections.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/rds/AuroraMySQLBacktrack.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/rds/AuroraMySQLLogging.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/rds/AuroraMySQLPostgresIAMAuth.ts 3 3 3 src/rules/rds/RDSEnhancedMonitoringEnabled.ts src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/nag-pack.ts 3 3 7 src/rules/rds/RDSInBackupPlan.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/opensearch/OpenSearchZoneAwareness.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/quicksight/QuicksightSSLConnections.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/rds/AuroraMySQLBacktrack.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/rds/AuroraMySQLLogging.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/rds/AuroraMySQLPostgresIAMAuth.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts 3 3 3 src/rules/rds/RDSInBackupPlan.ts src/rules/rds/RDSEnhancedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/nag-pack.ts 3 3 7 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/opensearch/OpenSearchZoneAwareness.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/quicksight/QuicksightSSLConnections.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/rds/AuroraMySQLBacktrack.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/rds/AuroraMySQLLogging.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/rds/AuroraMySQLPostgresIAMAuth.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/rds/RDSEnhancedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSInstanceBackupEnabled.ts src/rules/rds/RDSInBackupPlan.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/nag-pack.ts 3 3 7 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/opensearch/OpenSearchZoneAwareness.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/quicksight/QuicksightSSLConnections.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/rds/AuroraMySQLBacktrack.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/rds/AuroraMySQLLogging.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/rds/AuroraMySQLPostgresIAMAuth.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/rds/RDSEnhancedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/rds/RDSInBackupPlan.ts 3 3 3 src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts src/rules/rds/RDSInstanceBackupEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/nag-pack.ts 3 3 7 src/rules/rds/RDSInstancePublicAccess.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/opensearch/OpenSearchZoneAwareness.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/quicksight/QuicksightSSLConnections.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/rds/AuroraMySQLBacktrack.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/rds/AuroraMySQLLogging.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/rds/AuroraMySQLPostgresIAMAuth.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/rds/RDSEnhancedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/rds/RDSInBackupPlan.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/rds/RDSInstanceBackupEnabled.ts 3 3 3 src/rules/rds/RDSInstancePublicAccess.ts src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/nag-pack.ts 3 3 7 src/rules/rds/RDSLoggingEnabled.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/opensearch/OpenSearchZoneAwareness.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/quicksight/QuicksightSSLConnections.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/rds/AuroraMySQLBacktrack.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/rds/AuroraMySQLLogging.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/rds/AuroraMySQLPostgresIAMAuth.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/rds/RDSEnhancedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/rds/RDSInBackupPlan.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/rds/RDSInstanceBackupEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/RDSLoggingEnabled.ts src/rules/rds/RDSInstancePublicAccess.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/nag-pack.ts 3 3 7 src/rules/rds/RDSMultiAZSupport.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/opensearch/OpenSearchZoneAwareness.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/quicksight/QuicksightSSLConnections.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/rds/AuroraMySQLBacktrack.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/rds/AuroraMySQLLogging.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/rds/AuroraMySQLPostgresIAMAuth.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/rds/RDSEnhancedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/rds/RDSInBackupPlan.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/rds/RDSInstanceBackupEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/rds/RDSInstancePublicAccess.ts 3 3 3 src/rules/rds/RDSMultiAZSupport.ts src/rules/rds/RDSLoggingEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/nag-pack.ts 3 3 7 src/rules/rds/RDSNonDefaultPort.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/opensearch/OpenSearchZoneAwareness.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/quicksight/QuicksightSSLConnections.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/rds/AuroraMySQLBacktrack.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/rds/AuroraMySQLLogging.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/rds/AuroraMySQLPostgresIAMAuth.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/rds/RDSEnhancedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/rds/RDSInBackupPlan.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/rds/RDSInstanceBackupEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/rds/RDSInstanceDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/rds/RDSInstancePublicAccess.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/rds/RDSLoggingEnabled.ts 3 3 3 src/rules/rds/RDSNonDefaultPort.ts src/rules/rds/RDSMultiAZSupport.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/nag-pack.ts 3 3 7 src/rules/rds/RDSStorageEncrypted.ts src/rules/apigw/APIGWAccessLogging.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/apigw/APIGWAssociatedWithWAF.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/apigw/APIGWAuthorization.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/apigw/APIGWCacheEnabledAndEncrypted.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/apigw/APIGWExecutionLoggingEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/apigw/APIGWRequestValidation.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/apigw/APIGWSSLEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/apigw/APIGWXrayEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/appsync/AppSyncGraphQLRequestLogging.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/athena/AthenaWorkgroupEncryptedQueryResults.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/autoscaling/AutoScalingGroupCooldownPeriod.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/autoscaling/AutoScalingGroupHealthCheck.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/autoscaling/AutoScalingGroupScalingNotifications.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cloudfront/CloudFrontDistributionAccessLogging.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cloudfront/CloudFrontDistributionGeoRestrictions.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cloudfront/CloudFrontDistributionWAFIntegration.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cloudtrail/CloudTrailEncryptionEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cloudtrail/CloudTrailLogFileValidationEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cloudwatch/CloudWatchAlarmAction.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cloudwatch/CloudWatchLogGroupEncrypted.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/codebuild/CodeBuildProjectEnvVarAwsCred.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/codebuild/CodeBuildProjectManagedImages.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/codebuild/CodeBuildProjectPrivilegedModeDisabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/codebuild/CodeBuildProjectSourceRepoUrl.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cognito/CognitoUserPoolAPIGWAuthorizer.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cognito/CognitoUserPoolMFA.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/cognito/CognitoUserPoolStrongPasswordPolicy.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/dms/DMSReplicationNotPublic.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/documentdb/DocumentDBClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/documentdb/DocumentDBClusterLogExports.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/documentdb/DocumentDBClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/documentdb/DocumentDBCredentialsInSecretsManager.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/dynamodb/DAXEncrypted.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/dynamodb/DynamoDBAutoScalingEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/dynamodb/DynamoDBInBackupPlan.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/dynamodb/DynamoDBPITREnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/ec2/EC2EBSInBackupPlan.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/ec2/EC2EBSOptimizedInstance.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/ec2/EC2EBSVolumeEncrypted.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/ec2/EC2InstanceDetailedMonitoringEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/ec2/EC2InstanceNoPublicIp.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/ec2/EC2InstanceProfileAttached.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/ec2/EC2InstanceTerminationProtection.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/ec2/EC2InstancesInVPC.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/ec2/EC2RestrictedCommonPorts.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/ec2/EC2RestrictedInbound.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/ec2/EC2RestrictedSSH.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/ec2/EC2SecurityGroupDescription.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/ecr/ECROpenAccess.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/ecs/ECSClusterCloudWatchContainerInsights.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/ecs/ECSTaskDefinitionContainerLogging.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/ecs/ECSTaskDefinitionUserForHostMode.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/efs/EFSEncrypted.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/efs/EFSInBackupPlan.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elasticache/ElastiCacheClusterInVPC.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elasticache/ElastiCacheClusterNonDefaultPort.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elasticache/ElastiCacheRedisClusterEncryption.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elasticache/ElastiCacheRedisClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elasticache/ElastiCacheRedisClusterRedisAuth.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elb/ALBHttpDropInvalidHeaderEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elb/ALBHttpToHttpsRedirection.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elb/ALBWAFEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elb/CLBConnectionDraining.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elb/CLBNoInboundHttpHttps.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elb/ELBACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elb/ELBCrossZoneLoadBalancingEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elb/ELBDeletionProtectionEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elb/ELBLoggingEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elb/ELBTlsHttpsListenersOnly.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/elb/ELBv2ACMCertificateRequired.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/emr/EMRAuthEC2KeyPairOrKerberos.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/emr/EMRKerberosEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/emr/EMRS3AccessLogging.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/iam/IAMGroupHasUsers.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/iam/IAMNoInlinePolicy.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/iam/IAMNoManagedPolicies.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/iam/IAMNoWildcardPermissions.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/iam/IAMPolicyNoStatementsWithAdminAccess.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/iam/IAMPolicyNoStatementsWithFullAccess.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/iam/IAMUserGroupMembership.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/iam/IAMUserNoPolicies.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/kinesis/KinesisDataFirehoseSSE.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/kinesis/KinesisDataStreamSSE.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/kms/KMSBackingKeyRotationEnabled.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/lambda/LambdaConcurrency.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/lambda/LambdaDLQ.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/lambda/LambdaInsideVPC.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/mediastore/MediaStoreCloudWatchMetricPolicy.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/mediastore/MediaStoreContainerAccessLogging.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/mediastore/MediaStoreContainerCORSPolicy.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/mediastore/MediaStoreContainerHasContainerPolicy.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/mediastore/MediaStoreContainerLifecyclePolicy.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/msk/MSKBrokerLogging.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/msk/MSKBrokerToBrokerTLS.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/msk/MSKClientToBrokerTLS.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/neptune/NeptuneClusterBackupRetentionPeriod.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/neptune/NeptuneClusterEncryptionAtRest.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/neptune/NeptuneClusterIAMAuth.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/neptune/NeptuneClusterMultiAZ.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/opensearch/OpenSearchAllowlistedIPs.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/opensearch/OpenSearchDedicatedMasterNode.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/opensearch/OpenSearchEncryptedAtRest.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/opensearch/OpenSearchErrorLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/opensearch/OpenSearchInVPCOnly.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/opensearch/OpenSearchNodeToNodeEncryption.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/opensearch/OpenSearchSlowLogsToCloudWatch.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/opensearch/OpenSearchZoneAwareness.ts 3 3 3 src/rules/rds/RDSStorageEncrypted.ts src/rules/quicksight/QuicksightSSLConnections.ts 3 3 3