rule_set_cis_aws_benchmark_level_2.json

{
  "owner": "AWS",
  "ruleSetName": "cis-aws-benchmark-level-2",
  "version": "1.0.0",
  "description": "AWS Guard rule set for Center for Internet Security (CIS) Amazon Web Services Foundation v1.4 Level 2",
  "contact": "aws-guard-rules-registry@amazon.com",
  "mappings": [
    {
      "guardFilePath": "rules/aws/iam/iam_user_no_policies_check.guard",
      "controls": [
        "1.15"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/iam_no_inline_policy_check.guard",
      "controls": [
        "1.15"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/iam_policy_no_statements_with_admin_access.guard",
      "controls": [
        "1.16"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/ec2_instance_profile_attached.guard",
      "controls": [
        "1.18"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_bucket_server_side_encryption_enabled.guard",
      "controls": [
        "2.1.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_bucket_ssl_requests_only.guard",
      "controls": [
        "2.1.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_bucket_versioning_enabled.guard",
      "controls": [
        "2.1.3"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_bucket_level_public_access_prohibited.guard",
      "controls": [
        "2.1.5",
        "3.3"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/encrypted_volumes.guard",
      "controls": [
        "2.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_rds/rds_storage_encrypted.guard",
      "controls": [
        "2.3.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/cloudtrail/cloud_trail_log_file_validation_enabled.guard",
      "controls": [
        "3.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_bucket_public_read_prohibited.guard",
      "controls": [
        "3.3"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_bucket_public_write_prohibited.guard",
      "controls": [
        "3.3"
      ]
    },
    {
      "guardFilePath": "rules/aws/cloudtrail/cloud_trail_cloud_watch_logs_enabled.guard",
      "controls": [
        "3.4"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_bucket_logging_enabled.guard",
      "controls": [
        "3.6"
      ]
    },
    {
      "guardFilePath": "rules/aws/cloudtrail/cloud_trail_encryption_enabled.guard",
      "controls": [
        "3.7"
      ]
    },
    {
      "guardFilePath": "rules/aws/aws_kms/cmk_backing_key_rotation_enabled.guard",
      "controls": [
        "3.8"
      ]
    },
    {
      "guardFilePath": "rules/aws/cloudtrail/cloudtrail_s3_dataevents_enabled.guard",
      "controls": [
        "3.1",
        "3.11"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/restricted_ssh.guard",
      "controls": [
        "5.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/restricted_common_ports.guard",
      "controls": [
        "5.2"
      ]
    }
  ]
}