[{"data":1,"prerenderedAt":3447},["ShallowReactive",2],{"content-query-uvMlgkbIih":3},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"tags":10,"body":16,"_type":3441,"_id":3442,"_source":3443,"_file":3444,"_stem":3445,"_extension":3446},"/codes/iso27001-aws-config","codes",false,"","ISO 27001 Compliance on AWS","How I configured AWS Config and Security Hub to achieve continuous ISO 27001 compliance monitoring and automated audit evidence.",[11,12,13,14,15],"aws","security","iso-27001","compliance","aws-config",{"type":17,"children":18,"toc":3433},"root",[19,28,34,41,418,424,429,1625,1631,1636,2376,2382,2387,3210,3216,3375,3381,3427],{"type":20,"tag":21,"props":22,"children":24},"element","h1",{"id":23},"setting-up-aws-for-iso-27001-certification",[25],{"type":26,"value":27},"text","Setting Up AWS for ISO 27001 Certification",{"type":20,"tag":29,"props":30,"children":31},"p",{},[32],{"type":26,"value":33},"This documents how I set up AWS infrastructure to meet ISO 27001 requirements using AWS Config for rule enforcement and Security Hub for centralized compliance reporting.",{"type":20,"tag":35,"props":36,"children":38},"h2",{"id":37},"architecture-overview",[39],{"type":26,"value":40},"Architecture Overview",{"type":20,"tag":42,"props":43,"children":47},"pre",{"className":44,"code":45,"language":46,"meta":7,"style":7},"language-mermaid shiki shiki-themes material-theme-lighter github-light github-dark","graph TB\n    subgraph \"Compliance Layer\"\n        SH[AWS Security Hub]\n        AC[AWS Config]\n        CR[Config Rules]\n        CF[Conformance Packs]\n    end\n\n    subgraph \"Detection & Response\"\n        GD[GuardDuty]\n        CT[CloudTrail]\n        CW[CloudWatch Alarms]\n        SNS[SNS Notifications]\n    end\n\n    subgraph \"Enforcement\"\n        SCP[Service Control Policies]\n        IAM[IAM Policies]\n        KMS[KMS Encryption]\n    end\n\n    subgraph \"Evidence & Reporting\"\n        S3[S3 - Audit Logs]\n        RPT[Compliance Reports]\n        DASH[Security Hub Dashboard]\n    end\n\n    AC --> CR\n    CR --> CF\n    CF --> SH\n    GD --> SH\n    CT --> S3\n    CT --> CW\n    CW --> SNS\n    SH --> DASH\n    SH --> RPT\n    SCP --> IAM\n\n    style SH fill:#4dabf7\n    style AC fill:#51cf66\n    style GD fill:#ffd43b\n","mermaid",[48],{"type":20,"tag":49,"props":50,"children":51},"code",{"__ignoreMap":7},[52,64,73,82,91,100,109,118,128,137,146,155,164,173,181,189,198,207,216,225,233,241,250,259,268,277,285,293,302,311,320,329,338,347,356,365,374,383,391,400,409],{"type":20,"tag":53,"props":54,"children":57},"span",{"class":55,"line":56},"line",1,[58],{"type":20,"tag":53,"props":59,"children":61},{"style":60},"--shiki-light:#90A4AE;--shiki-default:#24292E;--shiki-dark:#E1E4E8",[62],{"type":26,"value":63},"graph TB\n",{"type":20,"tag":53,"props":65,"children":67},{"class":55,"line":66},2,[68],{"type":20,"tag":53,"props":69,"children":70},{"style":60},[71],{"type":26,"value":72},"    subgraph \"Compliance Layer\"\n",{"type":20,"tag":53,"props":74,"children":76},{"class":55,"line":75},3,[77],{"type":20,"tag":53,"props":78,"children":79},{"style":60},[80],{"type":26,"value":81},"        SH[AWS Security Hub]\n",{"type":20,"tag":53,"props":83,"children":85},{"class":55,"line":84},4,[86],{"type":20,"tag":53,"props":87,"children":88},{"style":60},[89],{"type":26,"value":90},"        AC[AWS Config]\n",{"type":20,"tag":53,"props":92,"children":94},{"class":55,"line":93},5,[95],{"type":20,"tag":53,"props":96,"children":97},{"style":60},[98],{"type":26,"value":99},"        CR[Config Rules]\n",{"type":20,"tag":53,"props":101,"children":103},{"class":55,"line":102},6,[104],{"type":20,"tag":53,"props":105,"children":106},{"style":60},[107],{"type":26,"value":108},"        CF[Conformance Packs]\n",{"type":20,"tag":53,"props":110,"children":112},{"class":55,"line":111},7,[113],{"type":20,"tag":53,"props":114,"children":115},{"style":60},[116],{"type":26,"value":117},"    end\n",{"type":20,"tag":53,"props":119,"children":121},{"class":55,"line":120},8,[122],{"type":20,"tag":53,"props":123,"children":125},{"emptyLinePlaceholder":124},true,[126],{"type":26,"value":127},"\n",{"type":20,"tag":53,"props":129,"children":131},{"class":55,"line":130},9,[132],{"type":20,"tag":53,"props":133,"children":134},{"style":60},[135],{"type":26,"value":136},"    subgraph \"Detection & Response\"\n",{"type":20,"tag":53,"props":138,"children":140},{"class":55,"line":139},10,[141],{"type":20,"tag":53,"props":142,"children":143},{"style":60},[144],{"type":26,"value":145},"        GD[GuardDuty]\n",{"type":20,"tag":53,"props":147,"children":149},{"class":55,"line":148},11,[150],{"type":20,"tag":53,"props":151,"children":152},{"style":60},[153],{"type":26,"value":154},"        CT[CloudTrail]\n",{"type":20,"tag":53,"props":156,"children":158},{"class":55,"line":157},12,[159],{"type":20,"tag":53,"props":160,"children":161},{"style":60},[162],{"type":26,"value":163},"        CW[CloudWatch Alarms]\n",{"type":20,"tag":53,"props":165,"children":167},{"class":55,"line":166},13,[168],{"type":20,"tag":53,"props":169,"children":170},{"style":60},[171],{"type":26,"value":172},"        SNS[SNS Notifications]\n",{"type":20,"tag":53,"props":174,"children":176},{"class":55,"line":175},14,[177],{"type":20,"tag":53,"props":178,"children":179},{"style":60},[180],{"type":26,"value":117},{"type":20,"tag":53,"props":182,"children":184},{"class":55,"line":183},15,[185],{"type":20,"tag":53,"props":186,"children":187},{"emptyLinePlaceholder":124},[188],{"type":26,"value":127},{"type":20,"tag":53,"props":190,"children":192},{"class":55,"line":191},16,[193],{"type":20,"tag":53,"props":194,"children":195},{"style":60},[196],{"type":26,"value":197},"    subgraph \"Enforcement\"\n",{"type":20,"tag":53,"props":199,"children":201},{"class":55,"line":200},17,[202],{"type":20,"tag":53,"props":203,"children":204},{"style":60},[205],{"type":26,"value":206},"        SCP[Service Control Policies]\n",{"type":20,"tag":53,"props":208,"children":210},{"class":55,"line":209},18,[211],{"type":20,"tag":53,"props":212,"children":213},{"style":60},[214],{"type":26,"value":215},"        IAM[IAM Policies]\n",{"type":20,"tag":53,"props":217,"children":219},{"class":55,"line":218},19,[220],{"type":20,"tag":53,"props":221,"children":222},{"style":60},[223],{"type":26,"value":224},"        KMS[KMS Encryption]\n",{"type":20,"tag":53,"props":226,"children":228},{"class":55,"line":227},20,[229],{"type":20,"tag":53,"props":230,"children":231},{"style":60},[232],{"type":26,"value":117},{"type":20,"tag":53,"props":234,"children":236},{"class":55,"line":235},21,[237],{"type":20,"tag":53,"props":238,"children":239},{"emptyLinePlaceholder":124},[240],{"type":26,"value":127},{"type":20,"tag":53,"props":242,"children":244},{"class":55,"line":243},22,[245],{"type":20,"tag":53,"props":246,"children":247},{"style":60},[248],{"type":26,"value":249},"    subgraph \"Evidence & Reporting\"\n",{"type":20,"tag":53,"props":251,"children":253},{"class":55,"line":252},23,[254],{"type":20,"tag":53,"props":255,"children":256},{"style":60},[257],{"type":26,"value":258},"        S3[S3 - Audit Logs]\n",{"type":20,"tag":53,"props":260,"children":262},{"class":55,"line":261},24,[263],{"type":20,"tag":53,"props":264,"children":265},{"style":60},[266],{"type":26,"value":267},"        RPT[Compliance Reports]\n",{"type":20,"tag":53,"props":269,"children":271},{"class":55,"line":270},25,[272],{"type":20,"tag":53,"props":273,"children":274},{"style":60},[275],{"type":26,"value":276},"        DASH[Security Hub Dashboard]\n",{"type":20,"tag":53,"props":278,"children":280},{"class":55,"line":279},26,[281],{"type":20,"tag":53,"props":282,"children":283},{"style":60},[284],{"type":26,"value":117},{"type":20,"tag":53,"props":286,"children":288},{"class":55,"line":287},27,[289],{"type":20,"tag":53,"props":290,"children":291},{"emptyLinePlaceholder":124},[292],{"type":26,"value":127},{"type":20,"tag":53,"props":294,"children":296},{"class":55,"line":295},28,[297],{"type":20,"tag":53,"props":298,"children":299},{"style":60},[300],{"type":26,"value":301},"    AC --> CR\n",{"type":20,"tag":53,"props":303,"children":305},{"class":55,"line":304},29,[306],{"type":20,"tag":53,"props":307,"children":308},{"style":60},[309],{"type":26,"value":310},"    CR --> CF\n",{"type":20,"tag":53,"props":312,"children":314},{"class":55,"line":313},30,[315],{"type":20,"tag":53,"props":316,"children":317},{"style":60},[318],{"type":26,"value":319},"    CF --> SH\n",{"type":20,"tag":53,"props":321,"children":323},{"class":55,"line":322},31,[324],{"type":20,"tag":53,"props":325,"children":326},{"style":60},[327],{"type":26,"value":328},"    GD --> SH\n",{"type":20,"tag":53,"props":330,"children":332},{"class":55,"line":331},32,[333],{"type":20,"tag":53,"props":334,"children":335},{"style":60},[336],{"type":26,"value":337},"    CT --> S3\n",{"type":20,"tag":53,"props":339,"children":341},{"class":55,"line":340},33,[342],{"type":20,"tag":53,"props":343,"children":344},{"style":60},[345],{"type":26,"value":346},"    CT --> CW\n",{"type":20,"tag":53,"props":348,"children":350},{"class":55,"line":349},34,[351],{"type":20,"tag":53,"props":352,"children":353},{"style":60},[354],{"type":26,"value":355},"    CW --> SNS\n",{"type":20,"tag":53,"props":357,"children":359},{"class":55,"line":358},35,[360],{"type":20,"tag":53,"props":361,"children":362},{"style":60},[363],{"type":26,"value":364},"    SH --> DASH\n",{"type":20,"tag":53,"props":366,"children":368},{"class":55,"line":367},36,[369],{"type":20,"tag":53,"props":370,"children":371},{"style":60},[372],{"type":26,"value":373},"    SH --> RPT\n",{"type":20,"tag":53,"props":375,"children":377},{"class":55,"line":376},37,[378],{"type":20,"tag":53,"props":379,"children":380},{"style":60},[381],{"type":26,"value":382},"    SCP --> IAM\n",{"type":20,"tag":53,"props":384,"children":386},{"class":55,"line":385},38,[387],{"type":20,"tag":53,"props":388,"children":389},{"emptyLinePlaceholder":124},[390],{"type":26,"value":127},{"type":20,"tag":53,"props":392,"children":394},{"class":55,"line":393},39,[395],{"type":20,"tag":53,"props":396,"children":397},{"style":60},[398],{"type":26,"value":399},"    style SH fill:#4dabf7\n",{"type":20,"tag":53,"props":401,"children":403},{"class":55,"line":402},40,[404],{"type":20,"tag":53,"props":405,"children":406},{"style":60},[407],{"type":26,"value":408},"    style AC fill:#51cf66\n",{"type":20,"tag":53,"props":410,"children":412},{"class":55,"line":411},41,[413],{"type":20,"tag":53,"props":414,"children":415},{"style":60},[416],{"type":26,"value":417},"    style GD fill:#ffd43b\n",{"type":20,"tag":35,"props":419,"children":421},{"id":420},"aws-config-rules-for-iso-27001",[422],{"type":26,"value":423},"AWS Config Rules for ISO 27001",{"type":20,"tag":29,"props":425,"children":426},{},[427],{"type":26,"value":428},"The key controls mapped to ISO 27001 Annex A:",{"type":20,"tag":42,"props":430,"children":434},{"className":431,"code":432,"language":433,"meta":7,"style":7},"language-hcl shiki shiki-themes material-theme-lighter github-light github-dark","# A.9 - Access Control\nresource \"aws_config_config_rule\" \"iam_root_access_key\" {\n  name = \"iam-root-access-key-check\"\n  source {\n    owner             = \"AWS\"\n    source_identifier = \"IAM_ROOT_ACCESS_KEY_CHECK\"\n  }\n}\n\nresource \"aws_config_config_rule\" \"mfa_enabled\" {\n  name = \"iam-user-mfa-enabled\"\n  source {\n    owner             = \"AWS\"\n    source_identifier = \"IAM_USER_MFA_ENABLED\"\n  }\n}\n\nresource \"aws_config_config_rule\" \"no_unrestricted_ssh\" {\n  name = \"restricted-ssh\"\n  source {\n    owner             = \"AWS\"\n    source_identifier = \"INCOMING_SSH_DISABLED\"\n  }\n}\n\n# A.10 - Cryptography\nresource \"aws_config_config_rule\" \"s3_encryption\" {\n  name = \"s3-bucket-server-side-encryption-enabled\"\n  source {\n    owner             = \"AWS\"\n    source_identifier = \"S3_BUCKET_SERVER_SIDE_ENCRYPTION_ENABLED\"\n  }\n}\n\nresource \"aws_config_config_rule\" \"rds_encryption\" {\n  name = \"rds-storage-encrypted\"\n  source {\n    owner             = \"AWS\"\n    source_identifier = \"RDS_STORAGE_ENCRYPTED\"\n  }\n}\n\nresource \"aws_config_config_rule\" \"ebs_encryption\" {\n  name = \"encrypted-volumes\"\n  source {\n    owner             = \"AWS\"\n    source_identifier = \"ENCRYPTED_VOLUMES\"\n  }\n}\n\n# A.12 - Operations Security\nresource \"aws_config_config_rule\" \"cloudtrail_enabled\" {\n  name = \"cloudtrail-enabled\"\n  source {\n    owner             = \"AWS\"\n    source_identifier = \"CLOUD_TRAIL_ENABLED\"\n  }\n}\n\nresource \"aws_config_config_rule\" \"vpc_flow_logs\" {\n  name = \"vpc-flow-logs-enabled\"\n  source {\n    owner             = \"AWS\"\n    source_identifier = \"VPC_FLOW_LOGS_ENABLED\"\n  }\n}\n\n# A.13 - Communications Security\nresource \"aws_config_config_rule\" \"alb_https\" {\n  name = \"alb-http-to-https-redirection-check\"\n  source {\n    owner             = \"AWS\"\n    source_identifier = \"ALB_HTTP_TO_HTTPS_REDIRECTION_CHECK\"\n  }\n}\n","hcl",[435],{"type":20,"tag":49,"props":436,"children":437},{"__ignoreMap":7},[438,447,473,504,516,542,567,575,583,590,610,634,645,668,692,699,706,713,733,757,768,791,815,822,829,836,844,864,888,899,922,946,953,960,967,987,1011,1022,1045,1069,1076,1083,1091,1112,1137,1149,1173,1198,1206,1214,1222,1231,1252,1277,1289,1313,1338,1346,1354,1362,1383,1408,1420,1444,1469,1477,1485,1493,1502,1523,1548,1560,1584,1609,1617],{"type":20,"tag":53,"props":439,"children":440},{"class":55,"line":56},[441],{"type":20,"tag":53,"props":442,"children":444},{"style":443},"--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#6A737D;--shiki-default-font-style:inherit;--shiki-dark:#6A737D;--shiki-dark-font-style:inherit",[445],{"type":26,"value":446},"# A.9 - Access Control\n",{"type":20,"tag":53,"props":448,"children":449},{"class":55,"line":66},[450,456,462,467],{"type":20,"tag":53,"props":451,"children":453},{"style":452},"--shiki-light:#E2931D;--shiki-default:#6F42C1;--shiki-dark:#B392F0",[454],{"type":26,"value":455},"resource",{"type":20,"tag":53,"props":457,"children":459},{"style":458},"--shiki-light:#90A4AE;--shiki-default:#005CC5;--shiki-dark:#79B8FF",[460],{"type":26,"value":461}," \"aws_config_config_rule\"",{"type":20,"tag":53,"props":463,"children":464},{"style":458},[465],{"type":26,"value":466}," \"iam_root_access_key\"",{"type":20,"tag":53,"props":468,"children":470},{"style":469},"--shiki-light:#39ADB5;--shiki-default:#24292E;--shiki-dark:#E1E4E8",[471],{"type":26,"value":472}," {\n",{"type":20,"tag":53,"props":474,"children":475},{"class":55,"line":75},[476,481,487,493,499],{"type":20,"tag":53,"props":477,"children":478},{"style":60},[479],{"type":26,"value":480},"  name",{"type":20,"tag":53,"props":482,"children":484},{"style":483},"--shiki-light:#39ADB5;--shiki-default:#D73A49;--shiki-dark:#F97583",[485],{"type":26,"value":486}," =",{"type":20,"tag":53,"props":488,"children":490},{"style":489},"--shiki-light:#39ADB5;--shiki-default:#032F62;--shiki-dark:#9ECBFF",[491],{"type":26,"value":492}," \"",{"type":20,"tag":53,"props":494,"children":496},{"style":495},"--shiki-light:#91B859;--shiki-default:#032F62;--shiki-dark:#9ECBFF",[497],{"type":26,"value":498},"iam-root-access-key-check",{"type":20,"tag":53,"props":500,"children":501},{"style":489},[502],{"type":26,"value":503},"\"\n",{"type":20,"tag":53,"props":505,"children":506},{"class":55,"line":84},[507,512],{"type":20,"tag":53,"props":508,"children":509},{"style":452},[510],{"type":26,"value":511},"  source",{"type":20,"tag":53,"props":513,"children":514},{"style":469},[515],{"type":26,"value":472},{"type":20,"tag":53,"props":517,"children":518},{"class":55,"line":93},[519,524,529,533,538],{"type":20,"tag":53,"props":520,"children":521},{"style":60},[522],{"type":26,"value":523},"    owner",{"type":20,"tag":53,"props":525,"children":526},{"style":483},[527],{"type":26,"value":528},"             =",{"type":20,"tag":53,"props":530,"children":531},{"style":489},[532],{"type":26,"value":492},{"type":20,"tag":53,"props":534,"children":535},{"style":495},[536],{"type":26,"value":537},"AWS",{"type":20,"tag":53,"props":539,"children":540},{"style":489},[541],{"type":26,"value":503},{"type":20,"tag":53,"props":543,"children":544},{"class":55,"line":102},[545,550,554,558,563],{"type":20,"tag":53,"props":546,"children":547},{"style":60},[548],{"type":26,"value":549},"    source_identifier",{"type":20,"tag":53,"props":551,"children":552},{"style":483},[553],{"type":26,"value":486},{"type":20,"tag":53,"props":555,"children":556},{"style":489},[557],{"type":26,"value":492},{"type":20,"tag":53,"props":559,"children":560},{"style":495},[561],{"type":26,"value":562},"IAM_ROOT_ACCESS_KEY_CHECK",{"type":20,"tag":53,"props":564,"children":565},{"style":489},[566],{"type":26,"value":503},{"type":20,"tag":53,"props":568,"children":569},{"class":55,"line":111},[570],{"type":20,"tag":53,"props":571,"children":572},{"style":469},[573],{"type":26,"value":574},"  }\n",{"type":20,"tag":53,"props":576,"children":577},{"class":55,"line":120},[578],{"type":20,"tag":53,"props":579,"children":580},{"style":469},[581],{"type":26,"value":582},"}\n",{"type":20,"tag":53,"props":584,"children":585},{"class":55,"line":130},[586],{"type":20,"tag":53,"props":587,"children":588},{"emptyLinePlaceholder":124},[589],{"type":26,"value":127},{"type":20,"tag":53,"props":591,"children":592},{"class":55,"line":139},[593,597,601,606],{"type":20,"tag":53,"props":594,"children":595},{"style":452},[596],{"type":26,"value":455},{"type":20,"tag":53,"props":598,"children":599},{"style":458},[600],{"type":26,"value":461},{"type":20,"tag":53,"props":602,"children":603},{"style":458},[604],{"type":26,"value":605}," \"mfa_enabled\"",{"type":20,"tag":53,"props":607,"children":608},{"style":469},[609],{"type":26,"value":472},{"type":20,"tag":53,"props":611,"children":612},{"class":55,"line":148},[613,617,621,625,630],{"type":20,"tag":53,"props":614,"children":615},{"style":60},[616],{"type":26,"value":480},{"type":20,"tag":53,"props":618,"children":619},{"style":483},[620],{"type":26,"value":486},{"type":20,"tag":53,"props":622,"children":623},{"style":489},[624],{"type":26,"value":492},{"type":20,"tag":53,"props":626,"children":627},{"style":495},[628],{"type":26,"value":629},"iam-user-mfa-enabled",{"type":20,"tag":53,"props":631,"children":632},{"style":489},[633],{"type":26,"value":503},{"type":20,"tag":53,"props":635,"children":636},{"class":55,"line":157},[637,641],{"type":20,"tag":53,"props":638,"children":639},{"style":452},[640],{"type":26,"value":511},{"type":20,"tag":53,"props":642,"children":643},{"style":469},[644],{"type":26,"value":472},{"type":20,"tag":53,"props":646,"children":647},{"class":55,"line":166},[648,652,656,660,664],{"type":20,"tag":53,"props":649,"children":650},{"style":60},[651],{"type":26,"value":523},{"type":20,"tag":53,"props":653,"children":654},{"style":483},[655],{"type":26,"value":528},{"type":20,"tag":53,"props":657,"children":658},{"style":489},[659],{"type":26,"value":492},{"type":20,"tag":53,"props":661,"children":662},{"style":495},[663],{"type":26,"value":537},{"type":20,"tag":53,"props":665,"children":666},{"style":489},[667],{"type":26,"value":503},{"type":20,"tag":53,"props":669,"children":670},{"class":55,"line":175},[671,675,679,683,688],{"type":20,"tag":53,"props":672,"children":673},{"style":60},[674],{"type":26,"value":549},{"type":20,"tag":53,"props":676,"children":677},{"style":483},[678],{"type":26,"value":486},{"type":20,"tag":53,"props":680,"children":681},{"style":489},[682],{"type":26,"value":492},{"type":20,"tag":53,"props":684,"children":685},{"style":495},[686],{"type":26,"value":687},"IAM_USER_MFA_ENABLED",{"type":20,"tag":53,"props":689,"children":690},{"style":489},[691],{"type":26,"value":503},{"type":20,"tag":53,"props":693,"children":694},{"class":55,"line":183},[695],{"type":20,"tag":53,"props":696,"children":697},{"style":469},[698],{"type":26,"value":574},{"type":20,"tag":53,"props":700,"children":701},{"class":55,"line":191},[702],{"type":20,"tag":53,"props":703,"children":704},{"style":469},[705],{"type":26,"value":582},{"type":20,"tag":53,"props":707,"children":708},{"class":55,"line":200},[709],{"type":20,"tag":53,"props":710,"children":711},{"emptyLinePlaceholder":124},[712],{"type":26,"value":127},{"type":20,"tag":53,"props":714,"children":715},{"class":55,"line":209},[716,720,724,729],{"type":20,"tag":53,"props":717,"children":718},{"style":452},[719],{"type":26,"value":455},{"type":20,"tag":53,"props":721,"children":722},{"style":458},[723],{"type":26,"value":461},{"type":20,"tag":53,"props":725,"children":726},{"style":458},[727],{"type":26,"value":728}," \"no_unrestricted_ssh\"",{"type":20,"tag":53,"props":730,"children":731},{"style":469},[732],{"type":26,"value":472},{"type":20,"tag":53,"props":734,"children":735},{"class":55,"line":218},[736,740,744,748,753],{"type":20,"tag":53,"props":737,"children":738},{"style":60},[739],{"type":26,"value":480},{"type":20,"tag":53,"props":741,"children":742},{"style":483},[743],{"type":26,"value":486},{"type":20,"tag":53,"props":745,"children":746},{"style":489},[747],{"type":26,"value":492},{"type":20,"tag":53,"props":749,"children":750},{"style":495},[751],{"type":26,"value":752},"restricted-ssh",{"type":20,"tag":53,"props":754,"children":755},{"style":489},[756],{"type":26,"value":503},{"type":20,"tag":53,"props":758,"children":759},{"class":55,"line":227},[760,764],{"type":20,"tag":53,"props":761,"children":762},{"style":452},[763],{"type":26,"value":511},{"type":20,"tag":53,"props":765,"children":766},{"style":469},[767],{"type":26,"value":472},{"type":20,"tag":53,"props":769,"children":770},{"class":55,"line":235},[771,775,779,783,787],{"type":20,"tag":53,"props":772,"children":773},{"style":60},[774],{"type":26,"value":523},{"type":20,"tag":53,"props":776,"children":777},{"style":483},[778],{"type":26,"value":528},{"type":20,"tag":53,"props":780,"children":781},{"style":489},[782],{"type":26,"value":492},{"type":20,"tag":53,"props":784,"children":785},{"style":495},[786],{"type":26,"value":537},{"type":20,"tag":53,"props":788,"children":789},{"style":489},[790],{"type":26,"value":503},{"type":20,"tag":53,"props":792,"children":793},{"class":55,"line":243},[794,798,802,806,811],{"type":20,"tag":53,"props":795,"children":796},{"style":60},[797],{"type":26,"value":549},{"type":20,"tag":53,"props":799,"children":800},{"style":483},[801],{"type":26,"value":486},{"type":20,"tag":53,"props":803,"children":804},{"style":489},[805],{"type":26,"value":492},{"type":20,"tag":53,"props":807,"children":808},{"style":495},[809],{"type":26,"value":810},"INCOMING_SSH_DISABLED",{"type":20,"tag":53,"props":812,"children":813},{"style":489},[814],{"type":26,"value":503},{"type":20,"tag":53,"props":816,"children":817},{"class":55,"line":252},[818],{"type":20,"tag":53,"props":819,"children":820},{"style":469},[821],{"type":26,"value":574},{"type":20,"tag":53,"props":823,"children":824},{"class":55,"line":261},[825],{"type":20,"tag":53,"props":826,"children":827},{"style":469},[828],{"type":26,"value":582},{"type":20,"tag":53,"props":830,"children":831},{"class":55,"line":270},[832],{"type":20,"tag":53,"props":833,"children":834},{"emptyLinePlaceholder":124},[835],{"type":26,"value":127},{"type":20,"tag":53,"props":837,"children":838},{"class":55,"line":279},[839],{"type":20,"tag":53,"props":840,"children":841},{"style":443},[842],{"type":26,"value":843},"# A.10 - Cryptography\n",{"type":20,"tag":53,"props":845,"children":846},{"class":55,"line":287},[847,851,855,860],{"type":20,"tag":53,"props":848,"children":849},{"style":452},[850],{"type":26,"value":455},{"type":20,"tag":53,"props":852,"children":853},{"style":458},[854],{"type":26,"value":461},{"type":20,"tag":53,"props":856,"children":857},{"style":458},[858],{"type":26,"value":859}," \"s3_encryption\"",{"type":20,"tag":53,"props":861,"children":862},{"style":469},[863],{"type":26,"value":472},{"type":20,"tag":53,"props":865,"children":866},{"class":55,"line":295},[867,871,875,879,884],{"type":20,"tag":53,"props":868,"children":869},{"style":60},[870],{"type":26,"value":480},{"type":20,"tag":53,"props":872,"children":873},{"style":483},[874],{"type":26,"value":486},{"type":20,"tag":53,"props":876,"children":877},{"style":489},[878],{"type":26,"value":492},{"type":20,"tag":53,"props":880,"children":881},{"style":495},[882],{"type":26,"value":883},"s3-bucket-server-side-encryption-enabled",{"type":20,"tag":53,"props":885,"children":886},{"style":489},[887],{"type":26,"value":503},{"type":20,"tag":53,"props":889,"children":890},{"class":55,"line":304},[891,895],{"type":20,"tag":53,"props":892,"children":893},{"style":452},[894],{"type":26,"value":511},{"type":20,"tag":53,"props":896,"children":897},{"style":469},[898],{"type":26,"value":472},{"type":20,"tag":53,"props":900,"children":901},{"class":55,"line":313},[902,906,910,914,918],{"type":20,"tag":53,"props":903,"children":904},{"style":60},[905],{"type":26,"value":523},{"type":20,"tag":53,"props":907,"children":908},{"style":483},[909],{"type":26,"value":528},{"type":20,"tag":53,"props":911,"children":912},{"style":489},[913],{"type":26,"value":492},{"type":20,"tag":53,"props":915,"children":916},{"style":495},[917],{"type":26,"value":537},{"type":20,"tag":53,"props":919,"children":920},{"style":489},[921],{"type":26,"value":503},{"type":20,"tag":53,"props":923,"children":924},{"class":55,"line":322},[925,929,933,937,942],{"type":20,"tag":53,"props":926,"children":927},{"style":60},[928],{"type":26,"value":549},{"type":20,"tag":53,"props":930,"children":931},{"style":483},[932],{"type":26,"value":486},{"type":20,"tag":53,"props":934,"children":935},{"style":489},[936],{"type":26,"value":492},{"type":20,"tag":53,"props":938,"children":939},{"style":495},[940],{"type":26,"value":941},"S3_BUCKET_SERVER_SIDE_ENCRYPTION_ENABLED",{"type":20,"tag":53,"props":943,"children":944},{"style":489},[945],{"type":26,"value":503},{"type":20,"tag":53,"props":947,"children":948},{"class":55,"line":331},[949],{"type":20,"tag":53,"props":950,"children":951},{"style":469},[952],{"type":26,"value":574},{"type":20,"tag":53,"props":954,"children":955},{"class":55,"line":340},[956],{"type":20,"tag":53,"props":957,"children":958},{"style":469},[959],{"type":26,"value":582},{"type":20,"tag":53,"props":961,"children":962},{"class":55,"line":349},[963],{"type":20,"tag":53,"props":964,"children":965},{"emptyLinePlaceholder":124},[966],{"type":26,"value":127},{"type":20,"tag":53,"props":968,"children":969},{"class":55,"line":358},[970,974,978,983],{"type":20,"tag":53,"props":971,"children":972},{"style":452},[973],{"type":26,"value":455},{"type":20,"tag":53,"props":975,"children":976},{"style":458},[977],{"type":26,"value":461},{"type":20,"tag":53,"props":979,"children":980},{"style":458},[981],{"type":26,"value":982}," \"rds_encryption\"",{"type":20,"tag":53,"props":984,"children":985},{"style":469},[986],{"type":26,"value":472},{"type":20,"tag":53,"props":988,"children":989},{"class":55,"line":367},[990,994,998,1002,1007],{"type":20,"tag":53,"props":991,"children":992},{"style":60},[993],{"type":26,"value":480},{"type":20,"tag":53,"props":995,"children":996},{"style":483},[997],{"type":26,"value":486},{"type":20,"tag":53,"props":999,"children":1000},{"style":489},[1001],{"type":26,"value":492},{"type":20,"tag":53,"props":1003,"children":1004},{"style":495},[1005],{"type":26,"value":1006},"rds-storage-encrypted",{"type":20,"tag":53,"props":1008,"children":1009},{"style":489},[1010],{"type":26,"value":503},{"type":20,"tag":53,"props":1012,"children":1013},{"class":55,"line":376},[1014,1018],{"type":20,"tag":53,"props":1015,"children":1016},{"style":452},[1017],{"type":26,"value":511},{"type":20,"tag":53,"props":1019,"children":1020},{"style":469},[1021],{"type":26,"value":472},{"type":20,"tag":53,"props":1023,"children":1024},{"class":55,"line":385},[1025,1029,1033,1037,1041],{"type":20,"tag":53,"props":1026,"children":1027},{"style":60},[1028],{"type":26,"value":523},{"type":20,"tag":53,"props":1030,"children":1031},{"style":483},[1032],{"type":26,"value":528},{"type":20,"tag":53,"props":1034,"children":1035},{"style":489},[1036],{"type":26,"value":492},{"type":20,"tag":53,"props":1038,"children":1039},{"style":495},[1040],{"type":26,"value":537},{"type":20,"tag":53,"props":1042,"children":1043},{"style":489},[1044],{"type":26,"value":503},{"type":20,"tag":53,"props":1046,"children":1047},{"class":55,"line":393},[1048,1052,1056,1060,1065],{"type":20,"tag":53,"props":1049,"children":1050},{"style":60},[1051],{"type":26,"value":549},{"type":20,"tag":53,"props":1053,"children":1054},{"style":483},[1055],{"type":26,"value":486},{"type":20,"tag":53,"props":1057,"children":1058},{"style":489},[1059],{"type":26,"value":492},{"type":20,"tag":53,"props":1061,"children":1062},{"style":495},[1063],{"type":26,"value":1064},"RDS_STORAGE_ENCRYPTED",{"type":20,"tag":53,"props":1066,"children":1067},{"style":489},[1068],{"type":26,"value":503},{"type":20,"tag":53,"props":1070,"children":1071},{"class":55,"line":402},[1072],{"type":20,"tag":53,"props":1073,"children":1074},{"style":469},[1075],{"type":26,"value":574},{"type":20,"tag":53,"props":1077,"children":1078},{"class":55,"line":411},[1079],{"type":20,"tag":53,"props":1080,"children":1081},{"style":469},[1082],{"type":26,"value":582},{"type":20,"tag":53,"props":1084,"children":1086},{"class":55,"line":1085},42,[1087],{"type":20,"tag":53,"props":1088,"children":1089},{"emptyLinePlaceholder":124},[1090],{"type":26,"value":127},{"type":20,"tag":53,"props":1092,"children":1094},{"class":55,"line":1093},43,[1095,1099,1103,1108],{"type":20,"tag":53,"props":1096,"children":1097},{"style":452},[1098],{"type":26,"value":455},{"type":20,"tag":53,"props":1100,"children":1101},{"style":458},[1102],{"type":26,"value":461},{"type":20,"tag":53,"props":1104,"children":1105},{"style":458},[1106],{"type":26,"value":1107}," \"ebs_encryption\"",{"type":20,"tag":53,"props":1109,"children":1110},{"style":469},[1111],{"type":26,"value":472},{"type":20,"tag":53,"props":1113,"children":1115},{"class":55,"line":1114},44,[1116,1120,1124,1128,1133],{"type":20,"tag":53,"props":1117,"children":1118},{"style":60},[1119],{"type":26,"value":480},{"type":20,"tag":53,"props":1121,"children":1122},{"style":483},[1123],{"type":26,"value":486},{"type":20,"tag":53,"props":1125,"children":1126},{"style":489},[1127],{"type":26,"value":492},{"type":20,"tag":53,"props":1129,"children":1130},{"style":495},[1131],{"type":26,"value":1132},"encrypted-volumes",{"type":20,"tag":53,"props":1134,"children":1135},{"style":489},[1136],{"type":26,"value":503},{"type":20,"tag":53,"props":1138,"children":1140},{"class":55,"line":1139},45,[1141,1145],{"type":20,"tag":53,"props":1142,"children":1143},{"style":452},[1144],{"type":26,"value":511},{"type":20,"tag":53,"props":1146,"children":1147},{"style":469},[1148],{"type":26,"value":472},{"type":20,"tag":53,"props":1150,"children":1152},{"class":55,"line":1151},46,[1153,1157,1161,1165,1169],{"type":20,"tag":53,"props":1154,"children":1155},{"style":60},[1156],{"type":26,"value":523},{"type":20,"tag":53,"props":1158,"children":1159},{"style":483},[1160],{"type":26,"value":528},{"type":20,"tag":53,"props":1162,"children":1163},{"style":489},[1164],{"type":26,"value":492},{"type":20,"tag":53,"props":1166,"children":1167},{"style":495},[1168],{"type":26,"value":537},{"type":20,"tag":53,"props":1170,"children":1171},{"style":489},[1172],{"type":26,"value":503},{"type":20,"tag":53,"props":1174,"children":1176},{"class":55,"line":1175},47,[1177,1181,1185,1189,1194],{"type":20,"tag":53,"props":1178,"children":1179},{"style":60},[1180],{"type":26,"value":549},{"type":20,"tag":53,"props":1182,"children":1183},{"style":483},[1184],{"type":26,"value":486},{"type":20,"tag":53,"props":1186,"children":1187},{"style":489},[1188],{"type":26,"value":492},{"type":20,"tag":53,"props":1190,"children":1191},{"style":495},[1192],{"type":26,"value":1193},"ENCRYPTED_VOLUMES",{"type":20,"tag":53,"props":1195,"children":1196},{"style":489},[1197],{"type":26,"value":503},{"type":20,"tag":53,"props":1199,"children":1201},{"class":55,"line":1200},48,[1202],{"type":20,"tag":53,"props":1203,"children":1204},{"style":469},[1205],{"type":26,"value":574},{"type":20,"tag":53,"props":1207,"children":1209},{"class":55,"line":1208},49,[1210],{"type":20,"tag":53,"props":1211,"children":1212},{"style":469},[1213],{"type":26,"value":582},{"type":20,"tag":53,"props":1215,"children":1217},{"class":55,"line":1216},50,[1218],{"type":20,"tag":53,"props":1219,"children":1220},{"emptyLinePlaceholder":124},[1221],{"type":26,"value":127},{"type":20,"tag":53,"props":1223,"children":1225},{"class":55,"line":1224},51,[1226],{"type":20,"tag":53,"props":1227,"children":1228},{"style":443},[1229],{"type":26,"value":1230},"# A.12 - Operations Security\n",{"type":20,"tag":53,"props":1232,"children":1234},{"class":55,"line":1233},52,[1235,1239,1243,1248],{"type":20,"tag":53,"props":1236,"children":1237},{"style":452},[1238],{"type":26,"value":455},{"type":20,"tag":53,"props":1240,"children":1241},{"style":458},[1242],{"type":26,"value":461},{"type":20,"tag":53,"props":1244,"children":1245},{"style":458},[1246],{"type":26,"value":1247}," \"cloudtrail_enabled\"",{"type":20,"tag":53,"props":1249,"children":1250},{"style":469},[1251],{"type":26,"value":472},{"type":20,"tag":53,"props":1253,"children":1255},{"class":55,"line":1254},53,[1256,1260,1264,1268,1273],{"type":20,"tag":53,"props":1257,"children":1258},{"style":60},[1259],{"type":26,"value":480},{"type":20,"tag":53,"props":1261,"children":1262},{"style":483},[1263],{"type":26,"value":486},{"type":20,"tag":53,"props":1265,"children":1266},{"style":489},[1267],{"type":26,"value":492},{"type":20,"tag":53,"props":1269,"children":1270},{"style":495},[1271],{"type":26,"value":1272},"cloudtrail-enabled",{"type":20,"tag":53,"props":1274,"children":1275},{"style":489},[1276],{"type":26,"value":503},{"type":20,"tag":53,"props":1278,"children":1280},{"class":55,"line":1279},54,[1281,1285],{"type":20,"tag":53,"props":1282,"children":1283},{"style":452},[1284],{"type":26,"value":511},{"type":20,"tag":53,"props":1286,"children":1287},{"style":469},[1288],{"type":26,"value":472},{"type":20,"tag":53,"props":1290,"children":1292},{"class":55,"line":1291},55,[1293,1297,1301,1305,1309],{"type":20,"tag":53,"props":1294,"children":1295},{"style":60},[1296],{"type":26,"value":523},{"type":20,"tag":53,"props":1298,"children":1299},{"style":483},[1300],{"type":26,"value":528},{"type":20,"tag":53,"props":1302,"children":1303},{"style":489},[1304],{"type":26,"value":492},{"type":20,"tag":53,"props":1306,"children":1307},{"style":495},[1308],{"type":26,"value":537},{"type":20,"tag":53,"props":1310,"children":1311},{"style":489},[1312],{"type":26,"value":503},{"type":20,"tag":53,"props":1314,"children":1316},{"class":55,"line":1315},56,[1317,1321,1325,1329,1334],{"type":20,"tag":53,"props":1318,"children":1319},{"style":60},[1320],{"type":26,"value":549},{"type":20,"tag":53,"props":1322,"children":1323},{"style":483},[1324],{"type":26,"value":486},{"type":20,"tag":53,"props":1326,"children":1327},{"style":489},[1328],{"type":26,"value":492},{"type":20,"tag":53,"props":1330,"children":1331},{"style":495},[1332],{"type":26,"value":1333},"CLOUD_TRAIL_ENABLED",{"type":20,"tag":53,"props":1335,"children":1336},{"style":489},[1337],{"type":26,"value":503},{"type":20,"tag":53,"props":1339,"children":1341},{"class":55,"line":1340},57,[1342],{"type":20,"tag":53,"props":1343,"children":1344},{"style":469},[1345],{"type":26,"value":574},{"type":20,"tag":53,"props":1347,"children":1349},{"class":55,"line":1348},58,[1350],{"type":20,"tag":53,"props":1351,"children":1352},{"style":469},[1353],{"type":26,"value":582},{"type":20,"tag":53,"props":1355,"children":1357},{"class":55,"line":1356},59,[1358],{"type":20,"tag":53,"props":1359,"children":1360},{"emptyLinePlaceholder":124},[1361],{"type":26,"value":127},{"type":20,"tag":53,"props":1363,"children":1365},{"class":55,"line":1364},60,[1366,1370,1374,1379],{"type":20,"tag":53,"props":1367,"children":1368},{"style":452},[1369],{"type":26,"value":455},{"type":20,"tag":53,"props":1371,"children":1372},{"style":458},[1373],{"type":26,"value":461},{"type":20,"tag":53,"props":1375,"children":1376},{"style":458},[1377],{"type":26,"value":1378}," \"vpc_flow_logs\"",{"type":20,"tag":53,"props":1380,"children":1381},{"style":469},[1382],{"type":26,"value":472},{"type":20,"tag":53,"props":1384,"children":1386},{"class":55,"line":1385},61,[1387,1391,1395,1399,1404],{"type":20,"tag":53,"props":1388,"children":1389},{"style":60},[1390],{"type":26,"value":480},{"type":20,"tag":53,"props":1392,"children":1393},{"style":483},[1394],{"type":26,"value":486},{"type":20,"tag":53,"props":1396,"children":1397},{"style":489},[1398],{"type":26,"value":492},{"type":20,"tag":53,"props":1400,"children":1401},{"style":495},[1402],{"type":26,"value":1403},"vpc-flow-logs-enabled",{"type":20,"tag":53,"props":1405,"children":1406},{"style":489},[1407],{"type":26,"value":503},{"type":20,"tag":53,"props":1409,"children":1411},{"class":55,"line":1410},62,[1412,1416],{"type":20,"tag":53,"props":1413,"children":1414},{"style":452},[1415],{"type":26,"value":511},{"type":20,"tag":53,"props":1417,"children":1418},{"style":469},[1419],{"type":26,"value":472},{"type":20,"tag":53,"props":1421,"children":1423},{"class":55,"line":1422},63,[1424,1428,1432,1436,1440],{"type":20,"tag":53,"props":1425,"children":1426},{"style":60},[1427],{"type":26,"value":523},{"type":20,"tag":53,"props":1429,"children":1430},{"style":483},[1431],{"type":26,"value":528},{"type":20,"tag":53,"props":1433,"children":1434},{"style":489},[1435],{"type":26,"value":492},{"type":20,"tag":53,"props":1437,"children":1438},{"style":495},[1439],{"type":26,"value":537},{"type":20,"tag":53,"props":1441,"children":1442},{"style":489},[1443],{"type":26,"value":503},{"type":20,"tag":53,"props":1445,"children":1447},{"class":55,"line":1446},64,[1448,1452,1456,1460,1465],{"type":20,"tag":53,"props":1449,"children":1450},{"style":60},[1451],{"type":26,"value":549},{"type":20,"tag":53,"props":1453,"children":1454},{"style":483},[1455],{"type":26,"value":486},{"type":20,"tag":53,"props":1457,"children":1458},{"style":489},[1459],{"type":26,"value":492},{"type":20,"tag":53,"props":1461,"children":1462},{"style":495},[1463],{"type":26,"value":1464},"VPC_FLOW_LOGS_ENABLED",{"type":20,"tag":53,"props":1466,"children":1467},{"style":489},[1468],{"type":26,"value":503},{"type":20,"tag":53,"props":1470,"children":1472},{"class":55,"line":1471},65,[1473],{"type":20,"tag":53,"props":1474,"children":1475},{"style":469},[1476],{"type":26,"value":574},{"type":20,"tag":53,"props":1478,"children":1480},{"class":55,"line":1479},66,[1481],{"type":20,"tag":53,"props":1482,"children":1483},{"style":469},[1484],{"type":26,"value":582},{"type":20,"tag":53,"props":1486,"children":1488},{"class":55,"line":1487},67,[1489],{"type":20,"tag":53,"props":1490,"children":1491},{"emptyLinePlaceholder":124},[1492],{"type":26,"value":127},{"type":20,"tag":53,"props":1494,"children":1496},{"class":55,"line":1495},68,[1497],{"type":20,"tag":53,"props":1498,"children":1499},{"style":443},[1500],{"type":26,"value":1501},"# A.13 - Communications Security\n",{"type":20,"tag":53,"props":1503,"children":1505},{"class":55,"line":1504},69,[1506,1510,1514,1519],{"type":20,"tag":53,"props":1507,"children":1508},{"style":452},[1509],{"type":26,"value":455},{"type":20,"tag":53,"props":1511,"children":1512},{"style":458},[1513],{"type":26,"value":461},{"type":20,"tag":53,"props":1515,"children":1516},{"style":458},[1517],{"type":26,"value":1518}," \"alb_https\"",{"type":20,"tag":53,"props":1520,"children":1521},{"style":469},[1522],{"type":26,"value":472},{"type":20,"tag":53,"props":1524,"children":1526},{"class":55,"line":1525},70,[1527,1531,1535,1539,1544],{"type":20,"tag":53,"props":1528,"children":1529},{"style":60},[1530],{"type":26,"value":480},{"type":20,"tag":53,"props":1532,"children":1533},{"style":483},[1534],{"type":26,"value":486},{"type":20,"tag":53,"props":1536,"children":1537},{"style":489},[1538],{"type":26,"value":492},{"type":20,"tag":53,"props":1540,"children":1541},{"style":495},[1542],{"type":26,"value":1543},"alb-http-to-https-redirection-check",{"type":20,"tag":53,"props":1545,"children":1546},{"style":489},[1547],{"type":26,"value":503},{"type":20,"tag":53,"props":1549,"children":1551},{"class":55,"line":1550},71,[1552,1556],{"type":20,"tag":53,"props":1553,"children":1554},{"style":452},[1555],{"type":26,"value":511},{"type":20,"tag":53,"props":1557,"children":1558},{"style":469},[1559],{"type":26,"value":472},{"type":20,"tag":53,"props":1561,"children":1563},{"class":55,"line":1562},72,[1564,1568,1572,1576,1580],{"type":20,"tag":53,"props":1565,"children":1566},{"style":60},[1567],{"type":26,"value":523},{"type":20,"tag":53,"props":1569,"children":1570},{"style":483},[1571],{"type":26,"value":528},{"type":20,"tag":53,"props":1573,"children":1574},{"style":489},[1575],{"type":26,"value":492},{"type":20,"tag":53,"props":1577,"children":1578},{"style":495},[1579],{"type":26,"value":537},{"type":20,"tag":53,"props":1581,"children":1582},{"style":489},[1583],{"type":26,"value":503},{"type":20,"tag":53,"props":1585,"children":1587},{"class":55,"line":1586},73,[1588,1592,1596,1600,1605],{"type":20,"tag":53,"props":1589,"children":1590},{"style":60},[1591],{"type":26,"value":549},{"type":20,"tag":53,"props":1593,"children":1594},{"style":483},[1595],{"type":26,"value":486},{"type":20,"tag":53,"props":1597,"children":1598},{"style":489},[1599],{"type":26,"value":492},{"type":20,"tag":53,"props":1601,"children":1602},{"style":495},[1603],{"type":26,"value":1604},"ALB_HTTP_TO_HTTPS_REDIRECTION_CHECK",{"type":20,"tag":53,"props":1606,"children":1607},{"style":489},[1608],{"type":26,"value":503},{"type":20,"tag":53,"props":1610,"children":1612},{"class":55,"line":1611},74,[1613],{"type":20,"tag":53,"props":1614,"children":1615},{"style":469},[1616],{"type":26,"value":574},{"type":20,"tag":53,"props":1618,"children":1620},{"class":55,"line":1619},75,[1621],{"type":20,"tag":53,"props":1622,"children":1623},{"style":469},[1624],{"type":26,"value":582},{"type":20,"tag":35,"props":1626,"children":1628},{"id":1627},"security-hub-configuration",[1629],{"type":26,"value":1630},"Security Hub Configuration",{"type":20,"tag":29,"props":1632,"children":1633},{},[1634],{"type":26,"value":1635},"Security Hub aggregates findings and maps them to compliance frameworks:",{"type":20,"tag":42,"props":1637,"children":1639},{"className":431,"code":1638,"language":433,"meta":7,"style":7},"resource \"aws_securityhub_account\" \"main\" {}\n\n# Enable ISO 27001 standard\nresource \"aws_securityhub_standards_subscription\" \"iso27001\" {\n  standards_arn = \"arn:aws:securityhub:${var.region}::standards/iso-27001/v/2022/1.0.0\"\n  depends_on    = [aws_securityhub_account.main]\n}\n\n# Enable AWS Foundational Security Best Practices\nresource \"aws_securityhub_standards_subscription\" \"aws_foundational\" {\n  standards_arn = \"arn:aws:securityhub:${var.region}::standards/aws-foundational-security-best-practices/v/1.0.0\"\n  depends_on    = [aws_securityhub_account.main]\n}\n\n# Automated findings notification\nresource \"aws_cloudwatch_event_rule\" \"security_hub_findings\" {\n  name        = \"security-hub-high-severity\"\n  description = \"Alert on HIGH and CRITICAL Security Hub findings\"\n\n  event_pattern = jsonencode({\n    source      = [\"aws.securityhub\"]\n    detail-type = [\"Security Hub Findings - Imported\"]\n    detail = {\n      findings = {\n        Severity = {\n          Label = [\"HIGH\", \"CRITICAL\"]\n        }\n      }\n    }\n  })\n}\n\nresource \"aws_cloudwatch_event_target\" \"sns\" {\n  rule      = aws_cloudwatch_event_rule.security_hub_findings.name\n  target_id = \"security-alerts\"\n  arn       = aws_sns_topic.security_alerts.arn\n}\n",[1640],{"type":20,"tag":49,"props":1641,"children":1642},{"__ignoreMap":7},[1643,1665,1672,1680,1701,1757,1794,1801,1808,1816,1836,1884,1915,1922,1929,1937,1958,1983,2008,2015,2038,2074,2107,2123,2139,2155,2206,2214,2222,2230,2238,2245,2252,2273,2308,2333,2369],{"type":20,"tag":53,"props":1644,"children":1645},{"class":55,"line":56},[1646,1650,1655,1660],{"type":20,"tag":53,"props":1647,"children":1648},{"style":452},[1649],{"type":26,"value":455},{"type":20,"tag":53,"props":1651,"children":1652},{"style":458},[1653],{"type":26,"value":1654}," \"aws_securityhub_account\"",{"type":20,"tag":53,"props":1656,"children":1657},{"style":458},[1658],{"type":26,"value":1659}," \"main\"",{"type":20,"tag":53,"props":1661,"children":1662},{"style":469},[1663],{"type":26,"value":1664}," {}\n",{"type":20,"tag":53,"props":1666,"children":1667},{"class":55,"line":66},[1668],{"type":20,"tag":53,"props":1669,"children":1670},{"emptyLinePlaceholder":124},[1671],{"type":26,"value":127},{"type":20,"tag":53,"props":1673,"children":1674},{"class":55,"line":75},[1675],{"type":20,"tag":53,"props":1676,"children":1677},{"style":443},[1678],{"type":26,"value":1679},"# Enable ISO 27001 standard\n",{"type":20,"tag":53,"props":1681,"children":1682},{"class":55,"line":84},[1683,1687,1692,1697],{"type":20,"tag":53,"props":1684,"children":1685},{"style":452},[1686],{"type":26,"value":455},{"type":20,"tag":53,"props":1688,"children":1689},{"style":458},[1690],{"type":26,"value":1691}," \"aws_securityhub_standards_subscription\"",{"type":20,"tag":53,"props":1693,"children":1694},{"style":458},[1695],{"type":26,"value":1696}," \"iso27001\"",{"type":20,"tag":53,"props":1698,"children":1699},{"style":469},[1700],{"type":26,"value":472},{"type":20,"tag":53,"props":1702,"children":1703},{"class":55,"line":93},[1704,1709,1713,1717,1722,1728,1733,1738,1743,1748,1753],{"type":20,"tag":53,"props":1705,"children":1706},{"style":60},[1707],{"type":26,"value":1708},"  standards_arn",{"type":20,"tag":53,"props":1710,"children":1711},{"style":483},[1712],{"type":26,"value":486},{"type":20,"tag":53,"props":1714,"children":1715},{"style":489},[1716],{"type":26,"value":492},{"type":20,"tag":53,"props":1718,"children":1719},{"style":495},[1720],{"type":26,"value":1721},"arn:aws:securityhub:",{"type":20,"tag":53,"props":1723,"children":1725},{"style":1724},"--shiki-light:#F76D47;--shiki-default:#D73A49;--shiki-dark:#F97583",[1726],{"type":26,"value":1727},"${",{"type":20,"tag":53,"props":1729,"children":1730},{"style":60},[1731],{"type":26,"value":1732},"var",{"type":20,"tag":53,"props":1734,"children":1735},{"style":483},[1736],{"type":26,"value":1737},".",{"type":20,"tag":53,"props":1739,"children":1740},{"style":60},[1741],{"type":26,"value":1742},"region",{"type":20,"tag":53,"props":1744,"children":1745},{"style":1724},[1746],{"type":26,"value":1747},"}",{"type":20,"tag":53,"props":1749,"children":1750},{"style":495},[1751],{"type":26,"value":1752},"::standards/iso-27001/v/2022/1.0.0",{"type":20,"tag":53,"props":1754,"children":1755},{"style":489},[1756],{"type":26,"value":503},{"type":20,"tag":53,"props":1758,"children":1759},{"class":55,"line":102},[1760,1765,1770,1775,1780,1784,1789],{"type":20,"tag":53,"props":1761,"children":1762},{"style":60},[1763],{"type":26,"value":1764},"  depends_on",{"type":20,"tag":53,"props":1766,"children":1767},{"style":483},[1768],{"type":26,"value":1769},"    =",{"type":20,"tag":53,"props":1771,"children":1772},{"style":469},[1773],{"type":26,"value":1774}," [",{"type":20,"tag":53,"props":1776,"children":1777},{"style":60},[1778],{"type":26,"value":1779},"aws_securityhub_account",{"type":20,"tag":53,"props":1781,"children":1782},{"style":483},[1783],{"type":26,"value":1737},{"type":20,"tag":53,"props":1785,"children":1786},{"style":60},[1787],{"type":26,"value":1788},"main",{"type":20,"tag":53,"props":1790,"children":1791},{"style":469},[1792],{"type":26,"value":1793},"]\n",{"type":20,"tag":53,"props":1795,"children":1796},{"class":55,"line":111},[1797],{"type":20,"tag":53,"props":1798,"children":1799},{"style":469},[1800],{"type":26,"value":582},{"type":20,"tag":53,"props":1802,"children":1803},{"class":55,"line":120},[1804],{"type":20,"tag":53,"props":1805,"children":1806},{"emptyLinePlaceholder":124},[1807],{"type":26,"value":127},{"type":20,"tag":53,"props":1809,"children":1810},{"class":55,"line":130},[1811],{"type":20,"tag":53,"props":1812,"children":1813},{"style":443},[1814],{"type":26,"value":1815},"# Enable AWS Foundational Security Best Practices\n",{"type":20,"tag":53,"props":1817,"children":1818},{"class":55,"line":139},[1819,1823,1827,1832],{"type":20,"tag":53,"props":1820,"children":1821},{"style":452},[1822],{"type":26,"value":455},{"type":20,"tag":53,"props":1824,"children":1825},{"style":458},[1826],{"type":26,"value":1691},{"type":20,"tag":53,"props":1828,"children":1829},{"style":458},[1830],{"type":26,"value":1831}," \"aws_foundational\"",{"type":20,"tag":53,"props":1833,"children":1834},{"style":469},[1835],{"type":26,"value":472},{"type":20,"tag":53,"props":1837,"children":1838},{"class":55,"line":148},[1839,1843,1847,1851,1855,1859,1863,1867,1871,1875,1880],{"type":20,"tag":53,"props":1840,"children":1841},{"style":60},[1842],{"type":26,"value":1708},{"type":20,"tag":53,"props":1844,"children":1845},{"style":483},[1846],{"type":26,"value":486},{"type":20,"tag":53,"props":1848,"children":1849},{"style":489},[1850],{"type":26,"value":492},{"type":20,"tag":53,"props":1852,"children":1853},{"style":495},[1854],{"type":26,"value":1721},{"type":20,"tag":53,"props":1856,"children":1857},{"style":1724},[1858],{"type":26,"value":1727},{"type":20,"tag":53,"props":1860,"children":1861},{"style":60},[1862],{"type":26,"value":1732},{"type":20,"tag":53,"props":1864,"children":1865},{"style":483},[1866],{"type":26,"value":1737},{"type":20,"tag":53,"props":1868,"children":1869},{"style":60},[1870],{"type":26,"value":1742},{"type":20,"tag":53,"props":1872,"children":1873},{"style":1724},[1874],{"type":26,"value":1747},{"type":20,"tag":53,"props":1876,"children":1877},{"style":495},[1878],{"type":26,"value":1879},"::standards/aws-foundational-security-best-practices/v/1.0.0",{"type":20,"tag":53,"props":1881,"children":1882},{"style":489},[1883],{"type":26,"value":503},{"type":20,"tag":53,"props":1885,"children":1886},{"class":55,"line":157},[1887,1891,1895,1899,1903,1907,1911],{"type":20,"tag":53,"props":1888,"children":1889},{"style":60},[1890],{"type":26,"value":1764},{"type":20,"tag":53,"props":1892,"children":1893},{"style":483},[1894],{"type":26,"value":1769},{"type":20,"tag":53,"props":1896,"children":1897},{"style":469},[1898],{"type":26,"value":1774},{"type":20,"tag":53,"props":1900,"children":1901},{"style":60},[1902],{"type":26,"value":1779},{"type":20,"tag":53,"props":1904,"children":1905},{"style":483},[1906],{"type":26,"value":1737},{"type":20,"tag":53,"props":1908,"children":1909},{"style":60},[1910],{"type":26,"value":1788},{"type":20,"tag":53,"props":1912,"children":1913},{"style":469},[1914],{"type":26,"value":1793},{"type":20,"tag":53,"props":1916,"children":1917},{"class":55,"line":166},[1918],{"type":20,"tag":53,"props":1919,"children":1920},{"style":469},[1921],{"type":26,"value":582},{"type":20,"tag":53,"props":1923,"children":1924},{"class":55,"line":175},[1925],{"type":20,"tag":53,"props":1926,"children":1927},{"emptyLinePlaceholder":124},[1928],{"type":26,"value":127},{"type":20,"tag":53,"props":1930,"children":1931},{"class":55,"line":183},[1932],{"type":20,"tag":53,"props":1933,"children":1934},{"style":443},[1935],{"type":26,"value":1936},"# Automated findings notification\n",{"type":20,"tag":53,"props":1938,"children":1939},{"class":55,"line":191},[1940,1944,1949,1954],{"type":20,"tag":53,"props":1941,"children":1942},{"style":452},[1943],{"type":26,"value":455},{"type":20,"tag":53,"props":1945,"children":1946},{"style":458},[1947],{"type":26,"value":1948}," \"aws_cloudwatch_event_rule\"",{"type":20,"tag":53,"props":1950,"children":1951},{"style":458},[1952],{"type":26,"value":1953}," \"security_hub_findings\"",{"type":20,"tag":53,"props":1955,"children":1956},{"style":469},[1957],{"type":26,"value":472},{"type":20,"tag":53,"props":1959,"children":1960},{"class":55,"line":200},[1961,1965,1970,1974,1979],{"type":20,"tag":53,"props":1962,"children":1963},{"style":60},[1964],{"type":26,"value":480},{"type":20,"tag":53,"props":1966,"children":1967},{"style":483},[1968],{"type":26,"value":1969},"        =",{"type":20,"tag":53,"props":1971,"children":1972},{"style":489},[1973],{"type":26,"value":492},{"type":20,"tag":53,"props":1975,"children":1976},{"style":495},[1977],{"type":26,"value":1978},"security-hub-high-severity",{"type":20,"tag":53,"props":1980,"children":1981},{"style":489},[1982],{"type":26,"value":503},{"type":20,"tag":53,"props":1984,"children":1985},{"class":55,"line":209},[1986,1991,1995,1999,2004],{"type":20,"tag":53,"props":1987,"children":1988},{"style":60},[1989],{"type":26,"value":1990},"  description",{"type":20,"tag":53,"props":1992,"children":1993},{"style":483},[1994],{"type":26,"value":486},{"type":20,"tag":53,"props":1996,"children":1997},{"style":489},[1998],{"type":26,"value":492},{"type":20,"tag":53,"props":2000,"children":2001},{"style":495},[2002],{"type":26,"value":2003},"Alert on HIGH and CRITICAL Security Hub findings",{"type":20,"tag":53,"props":2005,"children":2006},{"style":489},[2007],{"type":26,"value":503},{"type":20,"tag":53,"props":2009,"children":2010},{"class":55,"line":218},[2011],{"type":20,"tag":53,"props":2012,"children":2013},{"emptyLinePlaceholder":124},[2014],{"type":26,"value":127},{"type":20,"tag":53,"props":2016,"children":2017},{"class":55,"line":227},[2018,2023,2027,2033],{"type":20,"tag":53,"props":2019,"children":2020},{"style":60},[2021],{"type":26,"value":2022},"  event_pattern",{"type":20,"tag":53,"props":2024,"children":2025},{"style":483},[2026],{"type":26,"value":486},{"type":20,"tag":53,"props":2028,"children":2030},{"style":2029},"--shiki-light:#6182B8;--shiki-default:#005CC5;--shiki-dark:#79B8FF",[2031],{"type":26,"value":2032}," jsonencode",{"type":20,"tag":53,"props":2034,"children":2035},{"style":469},[2036],{"type":26,"value":2037},"({\n",{"type":20,"tag":53,"props":2039,"children":2040},{"class":55,"line":235},[2041,2046,2051,2056,2061,2066,2070],{"type":20,"tag":53,"props":2042,"children":2043},{"style":60},[2044],{"type":26,"value":2045},"    source",{"type":20,"tag":53,"props":2047,"children":2048},{"style":483},[2049],{"type":26,"value":2050},"      =",{"type":20,"tag":53,"props":2052,"children":2054},{"style":2053},"--shiki-light:#E53935;--shiki-default:#24292E;--shiki-dark:#E1E4E8",[2055],{"type":26,"value":1774},{"type":20,"tag":53,"props":2057,"children":2058},{"style":489},[2059],{"type":26,"value":2060},"\"",{"type":20,"tag":53,"props":2062,"children":2063},{"style":495},[2064],{"type":26,"value":2065},"aws.securityhub",{"type":20,"tag":53,"props":2067,"children":2068},{"style":489},[2069],{"type":26,"value":2060},{"type":20,"tag":53,"props":2071,"children":2072},{"style":2053},[2073],{"type":26,"value":1793},{"type":20,"tag":53,"props":2075,"children":2076},{"class":55,"line":243},[2077,2082,2086,2090,2094,2099,2103],{"type":20,"tag":53,"props":2078,"children":2079},{"style":60},[2080],{"type":26,"value":2081},"    detail-type",{"type":20,"tag":53,"props":2083,"children":2084},{"style":483},[2085],{"type":26,"value":486},{"type":20,"tag":53,"props":2087,"children":2088},{"style":2053},[2089],{"type":26,"value":1774},{"type":20,"tag":53,"props":2091,"children":2092},{"style":489},[2093],{"type":26,"value":2060},{"type":20,"tag":53,"props":2095,"children":2096},{"style":495},[2097],{"type":26,"value":2098},"Security Hub Findings - Imported",{"type":20,"tag":53,"props":2100,"children":2101},{"style":489},[2102],{"type":26,"value":2060},{"type":20,"tag":53,"props":2104,"children":2105},{"style":2053},[2106],{"type":26,"value":1793},{"type":20,"tag":53,"props":2108,"children":2109},{"class":55,"line":252},[2110,2115,2119],{"type":20,"tag":53,"props":2111,"children":2112},{"style":60},[2113],{"type":26,"value":2114},"    detail",{"type":20,"tag":53,"props":2116,"children":2117},{"style":483},[2118],{"type":26,"value":486},{"type":20,"tag":53,"props":2120,"children":2121},{"style":469},[2122],{"type":26,"value":472},{"type":20,"tag":53,"props":2124,"children":2125},{"class":55,"line":261},[2126,2131,2135],{"type":20,"tag":53,"props":2127,"children":2128},{"style":60},[2129],{"type":26,"value":2130},"      findings",{"type":20,"tag":53,"props":2132,"children":2133},{"style":483},[2134],{"type":26,"value":486},{"type":20,"tag":53,"props":2136,"children":2137},{"style":469},[2138],{"type":26,"value":472},{"type":20,"tag":53,"props":2140,"children":2141},{"class":55,"line":270},[2142,2147,2151],{"type":20,"tag":53,"props":2143,"children":2144},{"style":60},[2145],{"type":26,"value":2146},"        Severity",{"type":20,"tag":53,"props":2148,"children":2149},{"style":483},[2150],{"type":26,"value":486},{"type":20,"tag":53,"props":2152,"children":2153},{"style":469},[2154],{"type":26,"value":472},{"type":20,"tag":53,"props":2156,"children":2157},{"class":55,"line":279},[2158,2163,2167,2171,2175,2180,2184,2189,2193,2198,2202],{"type":20,"tag":53,"props":2159,"children":2160},{"style":60},[2161],{"type":26,"value":2162},"          Label",{"type":20,"tag":53,"props":2164,"children":2165},{"style":483},[2166],{"type":26,"value":486},{"type":20,"tag":53,"props":2168,"children":2169},{"style":2053},[2170],{"type":26,"value":1774},{"type":20,"tag":53,"props":2172,"children":2173},{"style":489},[2174],{"type":26,"value":2060},{"type":20,"tag":53,"props":2176,"children":2177},{"style":495},[2178],{"type":26,"value":2179},"HIGH",{"type":20,"tag":53,"props":2181,"children":2182},{"style":489},[2183],{"type":26,"value":2060},{"type":20,"tag":53,"props":2185,"children":2186},{"style":2053},[2187],{"type":26,"value":2188},", ",{"type":20,"tag":53,"props":2190,"children":2191},{"style":489},[2192],{"type":26,"value":2060},{"type":20,"tag":53,"props":2194,"children":2195},{"style":495},[2196],{"type":26,"value":2197},"CRITICAL",{"type":20,"tag":53,"props":2199,"children":2200},{"style":489},[2201],{"type":26,"value":2060},{"type":20,"tag":53,"props":2203,"children":2204},{"style":2053},[2205],{"type":26,"value":1793},{"type":20,"tag":53,"props":2207,"children":2208},{"class":55,"line":287},[2209],{"type":20,"tag":53,"props":2210,"children":2211},{"style":469},[2212],{"type":26,"value":2213},"        }\n",{"type":20,"tag":53,"props":2215,"children":2216},{"class":55,"line":295},[2217],{"type":20,"tag":53,"props":2218,"children":2219},{"style":469},[2220],{"type":26,"value":2221},"      }\n",{"type":20,"tag":53,"props":2223,"children":2224},{"class":55,"line":304},[2225],{"type":20,"tag":53,"props":2226,"children":2227},{"style":469},[2228],{"type":26,"value":2229},"    }\n",{"type":20,"tag":53,"props":2231,"children":2232},{"class":55,"line":313},[2233],{"type":20,"tag":53,"props":2234,"children":2235},{"style":469},[2236],{"type":26,"value":2237},"  })\n",{"type":20,"tag":53,"props":2239,"children":2240},{"class":55,"line":322},[2241],{"type":20,"tag":53,"props":2242,"children":2243},{"style":469},[2244],{"type":26,"value":582},{"type":20,"tag":53,"props":2246,"children":2247},{"class":55,"line":331},[2248],{"type":20,"tag":53,"props":2249,"children":2250},{"emptyLinePlaceholder":124},[2251],{"type":26,"value":127},{"type":20,"tag":53,"props":2253,"children":2254},{"class":55,"line":340},[2255,2259,2264,2269],{"type":20,"tag":53,"props":2256,"children":2257},{"style":452},[2258],{"type":26,"value":455},{"type":20,"tag":53,"props":2260,"children":2261},{"style":458},[2262],{"type":26,"value":2263}," \"aws_cloudwatch_event_target\"",{"type":20,"tag":53,"props":2265,"children":2266},{"style":458},[2267],{"type":26,"value":2268}," \"sns\"",{"type":20,"tag":53,"props":2270,"children":2271},{"style":469},[2272],{"type":26,"value":472},{"type":20,"tag":53,"props":2274,"children":2275},{"class":55,"line":349},[2276,2281,2285,2290,2294,2299,2303],{"type":20,"tag":53,"props":2277,"children":2278},{"style":60},[2279],{"type":26,"value":2280},"  rule",{"type":20,"tag":53,"props":2282,"children":2283},{"style":483},[2284],{"type":26,"value":2050},{"type":20,"tag":53,"props":2286,"children":2287},{"style":2053},[2288],{"type":26,"value":2289}," aws_cloudwatch_event_rule",{"type":20,"tag":53,"props":2291,"children":2292},{"style":483},[2293],{"type":26,"value":1737},{"type":20,"tag":53,"props":2295,"children":2296},{"style":60},[2297],{"type":26,"value":2298},"security_hub_findings",{"type":20,"tag":53,"props":2300,"children":2301},{"style":483},[2302],{"type":26,"value":1737},{"type":20,"tag":53,"props":2304,"children":2305},{"style":60},[2306],{"type":26,"value":2307},"name\n",{"type":20,"tag":53,"props":2309,"children":2310},{"class":55,"line":358},[2311,2316,2320,2324,2329],{"type":20,"tag":53,"props":2312,"children":2313},{"style":60},[2314],{"type":26,"value":2315},"  target_id",{"type":20,"tag":53,"props":2317,"children":2318},{"style":483},[2319],{"type":26,"value":486},{"type":20,"tag":53,"props":2321,"children":2322},{"style":489},[2323],{"type":26,"value":492},{"type":20,"tag":53,"props":2325,"children":2326},{"style":495},[2327],{"type":26,"value":2328},"security-alerts",{"type":20,"tag":53,"props":2330,"children":2331},{"style":489},[2332],{"type":26,"value":503},{"type":20,"tag":53,"props":2334,"children":2335},{"class":55,"line":367},[2336,2341,2346,2351,2355,2360,2364],{"type":20,"tag":53,"props":2337,"children":2338},{"style":60},[2339],{"type":26,"value":2340},"  arn",{"type":20,"tag":53,"props":2342,"children":2343},{"style":483},[2344],{"type":26,"value":2345},"       =",{"type":20,"tag":53,"props":2347,"children":2348},{"style":2053},[2349],{"type":26,"value":2350}," aws_sns_topic",{"type":20,"tag":53,"props":2352,"children":2353},{"style":483},[2354],{"type":26,"value":1737},{"type":20,"tag":53,"props":2356,"children":2357},{"style":60},[2358],{"type":26,"value":2359},"security_alerts",{"type":20,"tag":53,"props":2361,"children":2362},{"style":483},[2363],{"type":26,"value":1737},{"type":20,"tag":53,"props":2365,"children":2366},{"style":60},[2367],{"type":26,"value":2368},"arn\n",{"type":20,"tag":53,"props":2370,"children":2371},{"class":55,"line":376},[2372],{"type":20,"tag":53,"props":2373,"children":2374},{"style":469},[2375],{"type":26,"value":582},{"type":20,"tag":35,"props":2377,"children":2379},{"id":2378},"cloudtrail-for-audit-logging",[2380],{"type":26,"value":2381},"CloudTrail for Audit Logging",{"type":20,"tag":29,"props":2383,"children":2384},{},[2385],{"type":26,"value":2386},"Every API call is logged and stored in a dedicated audit S3 bucket with integrity validation:",{"type":20,"tag":42,"props":2388,"children":2390},{"className":431,"code":2389,"language":433,"meta":7,"style":7},"resource \"aws_cloudtrail\" \"audit\" {\n  name                          = \"iso27001-audit-trail\"\n  s3_bucket_name                = aws_s3_bucket.audit_logs.id\n  include_global_service_events = true\n  is_multi_region_trail         = true\n  enable_log_file_validation    = true\n\n  event_selector {\n    read_write_type           = \"All\"\n    include_management_events = true\n\n    data_resource {\n      type   = \"AWS::S3::Object\"\n      values = [\"arn:aws:s3\"]\n    }\n  }\n\n  cloud_watch_logs_group_arn = \"${aws_cloudwatch_log_group.cloudtrail.arn}:*\"\n  cloud_watch_logs_role_arn  = aws_iam_role.cloudtrail_cloudwatch.arn\n}\n\nresource \"aws_s3_bucket\" \"audit_logs\" {\n  bucket = \"company-iso27001-audit-logs\"\n}\n\nresource \"aws_s3_bucket_versioning\" \"audit_logs\" {\n  bucket = aws_s3_bucket.audit_logs.id\n  versioning_configuration {\n    status = \"Enabled\"\n  }\n}\n\nresource \"aws_s3_bucket_lifecycle_configuration\" \"audit_logs\" {\n  bucket = aws_s3_bucket.audit_logs.id\n\n  rule {\n    id     = \"archive-old-logs\"\n    status = \"Enabled\"\n\n    transition {\n      days          = 90\n      storage_class = \"GLACIER\"\n    }\n\n    expiration {\n      days = 2555  # 7 years retention for compliance\n    }\n  }\n}\n",[2391],{"type":20,"tag":49,"props":2392,"children":2393},{"__ignoreMap":7},[2394,2415,2440,2476,2494,2511,2527,2534,2546,2572,2588,2595,2607,2633,2666,2673,2680,2687,2743,2778,2785,2792,2813,2838,2845,2852,2872,2903,2915,2940,2947,2954,2961,2981,3012,3019,3030,3056,3079,3086,3098,3117,3142,3149,3156,3168,3189,3196,3203],{"type":20,"tag":53,"props":2395,"children":2396},{"class":55,"line":56},[2397,2401,2406,2411],{"type":20,"tag":53,"props":2398,"children":2399},{"style":452},[2400],{"type":26,"value":455},{"type":20,"tag":53,"props":2402,"children":2403},{"style":458},[2404],{"type":26,"value":2405}," \"aws_cloudtrail\"",{"type":20,"tag":53,"props":2407,"children":2408},{"style":458},[2409],{"type":26,"value":2410}," \"audit\"",{"type":20,"tag":53,"props":2412,"children":2413},{"style":469},[2414],{"type":26,"value":472},{"type":20,"tag":53,"props":2416,"children":2417},{"class":55,"line":66},[2418,2422,2427,2431,2436],{"type":20,"tag":53,"props":2419,"children":2420},{"style":60},[2421],{"type":26,"value":480},{"type":20,"tag":53,"props":2423,"children":2424},{"style":483},[2425],{"type":26,"value":2426},"                          =",{"type":20,"tag":53,"props":2428,"children":2429},{"style":489},[2430],{"type":26,"value":492},{"type":20,"tag":53,"props":2432,"children":2433},{"style":495},[2434],{"type":26,"value":2435},"iso27001-audit-trail",{"type":20,"tag":53,"props":2437,"children":2438},{"style":489},[2439],{"type":26,"value":503},{"type":20,"tag":53,"props":2441,"children":2442},{"class":55,"line":75},[2443,2448,2453,2458,2462,2467,2471],{"type":20,"tag":53,"props":2444,"children":2445},{"style":60},[2446],{"type":26,"value":2447},"  s3_bucket_name",{"type":20,"tag":53,"props":2449,"children":2450},{"style":483},[2451],{"type":26,"value":2452},"                =",{"type":20,"tag":53,"props":2454,"children":2455},{"style":2053},[2456],{"type":26,"value":2457}," aws_s3_bucket",{"type":20,"tag":53,"props":2459,"children":2460},{"style":483},[2461],{"type":26,"value":1737},{"type":20,"tag":53,"props":2463,"children":2464},{"style":60},[2465],{"type":26,"value":2466},"audit_logs",{"type":20,"tag":53,"props":2468,"children":2469},{"style":483},[2470],{"type":26,"value":1737},{"type":20,"tag":53,"props":2472,"children":2473},{"style":60},[2474],{"type":26,"value":2475},"id\n",{"type":20,"tag":53,"props":2477,"children":2478},{"class":55,"line":84},[2479,2484,2488],{"type":20,"tag":53,"props":2480,"children":2481},{"style":60},[2482],{"type":26,"value":2483},"  include_global_service_events",{"type":20,"tag":53,"props":2485,"children":2486},{"style":483},[2487],{"type":26,"value":486},{"type":20,"tag":53,"props":2489,"children":2491},{"style":2490},"--shiki-light:#39ADB5;--shiki-default:#005CC5;--shiki-dark:#79B8FF",[2492],{"type":26,"value":2493}," true\n",{"type":20,"tag":53,"props":2495,"children":2496},{"class":55,"line":93},[2497,2502,2507],{"type":20,"tag":53,"props":2498,"children":2499},{"style":60},[2500],{"type":26,"value":2501},"  is_multi_region_trail",{"type":20,"tag":53,"props":2503,"children":2504},{"style":483},[2505],{"type":26,"value":2506},"         =",{"type":20,"tag":53,"props":2508,"children":2509},{"style":2490},[2510],{"type":26,"value":2493},{"type":20,"tag":53,"props":2512,"children":2513},{"class":55,"line":102},[2514,2519,2523],{"type":20,"tag":53,"props":2515,"children":2516},{"style":60},[2517],{"type":26,"value":2518},"  enable_log_file_validation",{"type":20,"tag":53,"props":2520,"children":2521},{"style":483},[2522],{"type":26,"value":1769},{"type":20,"tag":53,"props":2524,"children":2525},{"style":2490},[2526],{"type":26,"value":2493},{"type":20,"tag":53,"props":2528,"children":2529},{"class":55,"line":111},[2530],{"type":20,"tag":53,"props":2531,"children":2532},{"emptyLinePlaceholder":124},[2533],{"type":26,"value":127},{"type":20,"tag":53,"props":2535,"children":2536},{"class":55,"line":120},[2537,2542],{"type":20,"tag":53,"props":2538,"children":2539},{"style":452},[2540],{"type":26,"value":2541},"  event_selector",{"type":20,"tag":53,"props":2543,"children":2544},{"style":469},[2545],{"type":26,"value":472},{"type":20,"tag":53,"props":2547,"children":2548},{"class":55,"line":130},[2549,2554,2559,2563,2568],{"type":20,"tag":53,"props":2550,"children":2551},{"style":60},[2552],{"type":26,"value":2553},"    read_write_type",{"type":20,"tag":53,"props":2555,"children":2556},{"style":483},[2557],{"type":26,"value":2558},"           =",{"type":20,"tag":53,"props":2560,"children":2561},{"style":489},[2562],{"type":26,"value":492},{"type":20,"tag":53,"props":2564,"children":2565},{"style":495},[2566],{"type":26,"value":2567},"All",{"type":20,"tag":53,"props":2569,"children":2570},{"style":489},[2571],{"type":26,"value":503},{"type":20,"tag":53,"props":2573,"children":2574},{"class":55,"line":139},[2575,2580,2584],{"type":20,"tag":53,"props":2576,"children":2577},{"style":60},[2578],{"type":26,"value":2579},"    include_management_events",{"type":20,"tag":53,"props":2581,"children":2582},{"style":483},[2583],{"type":26,"value":486},{"type":20,"tag":53,"props":2585,"children":2586},{"style":2490},[2587],{"type":26,"value":2493},{"type":20,"tag":53,"props":2589,"children":2590},{"class":55,"line":148},[2591],{"type":20,"tag":53,"props":2592,"children":2593},{"emptyLinePlaceholder":124},[2594],{"type":26,"value":127},{"type":20,"tag":53,"props":2596,"children":2597},{"class":55,"line":157},[2598,2603],{"type":20,"tag":53,"props":2599,"children":2600},{"style":452},[2601],{"type":26,"value":2602},"    data_resource",{"type":20,"tag":53,"props":2604,"children":2605},{"style":469},[2606],{"type":26,"value":472},{"type":20,"tag":53,"props":2608,"children":2609},{"class":55,"line":166},[2610,2615,2620,2624,2629],{"type":20,"tag":53,"props":2611,"children":2612},{"style":60},[2613],{"type":26,"value":2614},"      type",{"type":20,"tag":53,"props":2616,"children":2617},{"style":483},[2618],{"type":26,"value":2619},"   =",{"type":20,"tag":53,"props":2621,"children":2622},{"style":489},[2623],{"type":26,"value":492},{"type":20,"tag":53,"props":2625,"children":2626},{"style":495},[2627],{"type":26,"value":2628},"AWS::S3::Object",{"type":20,"tag":53,"props":2630,"children":2631},{"style":489},[2632],{"type":26,"value":503},{"type":20,"tag":53,"props":2634,"children":2635},{"class":55,"line":175},[2636,2641,2645,2649,2653,2658,2662],{"type":20,"tag":53,"props":2637,"children":2638},{"style":60},[2639],{"type":26,"value":2640},"      values",{"type":20,"tag":53,"props":2642,"children":2643},{"style":483},[2644],{"type":26,"value":486},{"type":20,"tag":53,"props":2646,"children":2647},{"style":469},[2648],{"type":26,"value":1774},{"type":20,"tag":53,"props":2650,"children":2651},{"style":489},[2652],{"type":26,"value":2060},{"type":20,"tag":53,"props":2654,"children":2655},{"style":495},[2656],{"type":26,"value":2657},"arn:aws:s3",{"type":20,"tag":53,"props":2659,"children":2660},{"style":489},[2661],{"type":26,"value":2060},{"type":20,"tag":53,"props":2663,"children":2664},{"style":469},[2665],{"type":26,"value":1793},{"type":20,"tag":53,"props":2667,"children":2668},{"class":55,"line":183},[2669],{"type":20,"tag":53,"props":2670,"children":2671},{"style":469},[2672],{"type":26,"value":2229},{"type":20,"tag":53,"props":2674,"children":2675},{"class":55,"line":191},[2676],{"type":20,"tag":53,"props":2677,"children":2678},{"style":469},[2679],{"type":26,"value":574},{"type":20,"tag":53,"props":2681,"children":2682},{"class":55,"line":200},[2683],{"type":20,"tag":53,"props":2684,"children":2685},{"emptyLinePlaceholder":124},[2686],{"type":26,"value":127},{"type":20,"tag":53,"props":2688,"children":2689},{"class":55,"line":209},[2690,2695,2699,2703,2707,2712,2716,2721,2725,2730,2734,2739],{"type":20,"tag":53,"props":2691,"children":2692},{"style":60},[2693],{"type":26,"value":2694},"  cloud_watch_logs_group_arn",{"type":20,"tag":53,"props":2696,"children":2697},{"style":483},[2698],{"type":26,"value":486},{"type":20,"tag":53,"props":2700,"children":2701},{"style":489},[2702],{"type":26,"value":492},{"type":20,"tag":53,"props":2704,"children":2705},{"style":1724},[2706],{"type":26,"value":1727},{"type":20,"tag":53,"props":2708,"children":2709},{"style":60},[2710],{"type":26,"value":2711},"aws_cloudwatch_log_group",{"type":20,"tag":53,"props":2713,"children":2714},{"style":483},[2715],{"type":26,"value":1737},{"type":20,"tag":53,"props":2717,"children":2718},{"style":60},[2719],{"type":26,"value":2720},"cloudtrail",{"type":20,"tag":53,"props":2722,"children":2723},{"style":483},[2724],{"type":26,"value":1737},{"type":20,"tag":53,"props":2726,"children":2727},{"style":60},[2728],{"type":26,"value":2729},"arn",{"type":20,"tag":53,"props":2731,"children":2732},{"style":1724},[2733],{"type":26,"value":1747},{"type":20,"tag":53,"props":2735,"children":2736},{"style":495},[2737],{"type":26,"value":2738},":*",{"type":20,"tag":53,"props":2740,"children":2741},{"style":489},[2742],{"type":26,"value":503},{"type":20,"tag":53,"props":2744,"children":2745},{"class":55,"line":218},[2746,2751,2756,2761,2765,2770,2774],{"type":20,"tag":53,"props":2747,"children":2748},{"style":60},[2749],{"type":26,"value":2750},"  cloud_watch_logs_role_arn",{"type":20,"tag":53,"props":2752,"children":2753},{"style":483},[2754],{"type":26,"value":2755},"  =",{"type":20,"tag":53,"props":2757,"children":2758},{"style":2053},[2759],{"type":26,"value":2760}," aws_iam_role",{"type":20,"tag":53,"props":2762,"children":2763},{"style":483},[2764],{"type":26,"value":1737},{"type":20,"tag":53,"props":2766,"children":2767},{"style":60},[2768],{"type":26,"value":2769},"cloudtrail_cloudwatch",{"type":20,"tag":53,"props":2771,"children":2772},{"style":483},[2773],{"type":26,"value":1737},{"type":20,"tag":53,"props":2775,"children":2776},{"style":60},[2777],{"type":26,"value":2368},{"type":20,"tag":53,"props":2779,"children":2780},{"class":55,"line":227},[2781],{"type":20,"tag":53,"props":2782,"children":2783},{"style":469},[2784],{"type":26,"value":582},{"type":20,"tag":53,"props":2786,"children":2787},{"class":55,"line":235},[2788],{"type":20,"tag":53,"props":2789,"children":2790},{"emptyLinePlaceholder":124},[2791],{"type":26,"value":127},{"type":20,"tag":53,"props":2793,"children":2794},{"class":55,"line":243},[2795,2799,2804,2809],{"type":20,"tag":53,"props":2796,"children":2797},{"style":452},[2798],{"type":26,"value":455},{"type":20,"tag":53,"props":2800,"children":2801},{"style":458},[2802],{"type":26,"value":2803}," \"aws_s3_bucket\"",{"type":20,"tag":53,"props":2805,"children":2806},{"style":458},[2807],{"type":26,"value":2808}," \"audit_logs\"",{"type":20,"tag":53,"props":2810,"children":2811},{"style":469},[2812],{"type":26,"value":472},{"type":20,"tag":53,"props":2814,"children":2815},{"class":55,"line":252},[2816,2821,2825,2829,2834],{"type":20,"tag":53,"props":2817,"children":2818},{"style":60},[2819],{"type":26,"value":2820},"  bucket",{"type":20,"tag":53,"props":2822,"children":2823},{"style":483},[2824],{"type":26,"value":486},{"type":20,"tag":53,"props":2826,"children":2827},{"style":489},[2828],{"type":26,"value":492},{"type":20,"tag":53,"props":2830,"children":2831},{"style":495},[2832],{"type":26,"value":2833},"company-iso27001-audit-logs",{"type":20,"tag":53,"props":2835,"children":2836},{"style":489},[2837],{"type":26,"value":503},{"type":20,"tag":53,"props":2839,"children":2840},{"class":55,"line":261},[2841],{"type":20,"tag":53,"props":2842,"children":2843},{"style":469},[2844],{"type":26,"value":582},{"type":20,"tag":53,"props":2846,"children":2847},{"class":55,"line":270},[2848],{"type":20,"tag":53,"props":2849,"children":2850},{"emptyLinePlaceholder":124},[2851],{"type":26,"value":127},{"type":20,"tag":53,"props":2853,"children":2854},{"class":55,"line":279},[2855,2859,2864,2868],{"type":20,"tag":53,"props":2856,"children":2857},{"style":452},[2858],{"type":26,"value":455},{"type":20,"tag":53,"props":2860,"children":2861},{"style":458},[2862],{"type":26,"value":2863}," \"aws_s3_bucket_versioning\"",{"type":20,"tag":53,"props":2865,"children":2866},{"style":458},[2867],{"type":26,"value":2808},{"type":20,"tag":53,"props":2869,"children":2870},{"style":469},[2871],{"type":26,"value":472},{"type":20,"tag":53,"props":2873,"children":2874},{"class":55,"line":287},[2875,2879,2883,2887,2891,2895,2899],{"type":20,"tag":53,"props":2876,"children":2877},{"style":60},[2878],{"type":26,"value":2820},{"type":20,"tag":53,"props":2880,"children":2881},{"style":483},[2882],{"type":26,"value":486},{"type":20,"tag":53,"props":2884,"children":2885},{"style":2053},[2886],{"type":26,"value":2457},{"type":20,"tag":53,"props":2888,"children":2889},{"style":483},[2890],{"type":26,"value":1737},{"type":20,"tag":53,"props":2892,"children":2893},{"style":60},[2894],{"type":26,"value":2466},{"type":20,"tag":53,"props":2896,"children":2897},{"style":483},[2898],{"type":26,"value":1737},{"type":20,"tag":53,"props":2900,"children":2901},{"style":60},[2902],{"type":26,"value":2475},{"type":20,"tag":53,"props":2904,"children":2905},{"class":55,"line":295},[2906,2911],{"type":20,"tag":53,"props":2907,"children":2908},{"style":452},[2909],{"type":26,"value":2910},"  versioning_configuration",{"type":20,"tag":53,"props":2912,"children":2913},{"style":469},[2914],{"type":26,"value":472},{"type":20,"tag":53,"props":2916,"children":2917},{"class":55,"line":304},[2918,2923,2927,2931,2936],{"type":20,"tag":53,"props":2919,"children":2920},{"style":60},[2921],{"type":26,"value":2922},"    status",{"type":20,"tag":53,"props":2924,"children":2925},{"style":483},[2926],{"type":26,"value":486},{"type":20,"tag":53,"props":2928,"children":2929},{"style":489},[2930],{"type":26,"value":492},{"type":20,"tag":53,"props":2932,"children":2933},{"style":495},[2934],{"type":26,"value":2935},"Enabled",{"type":20,"tag":53,"props":2937,"children":2938},{"style":489},[2939],{"type":26,"value":503},{"type":20,"tag":53,"props":2941,"children":2942},{"class":55,"line":313},[2943],{"type":20,"tag":53,"props":2944,"children":2945},{"style":469},[2946],{"type":26,"value":574},{"type":20,"tag":53,"props":2948,"children":2949},{"class":55,"line":322},[2950],{"type":20,"tag":53,"props":2951,"children":2952},{"style":469},[2953],{"type":26,"value":582},{"type":20,"tag":53,"props":2955,"children":2956},{"class":55,"line":331},[2957],{"type":20,"tag":53,"props":2958,"children":2959},{"emptyLinePlaceholder":124},[2960],{"type":26,"value":127},{"type":20,"tag":53,"props":2962,"children":2963},{"class":55,"line":340},[2964,2968,2973,2977],{"type":20,"tag":53,"props":2965,"children":2966},{"style":452},[2967],{"type":26,"value":455},{"type":20,"tag":53,"props":2969,"children":2970},{"style":458},[2971],{"type":26,"value":2972}," \"aws_s3_bucket_lifecycle_configuration\"",{"type":20,"tag":53,"props":2974,"children":2975},{"style":458},[2976],{"type":26,"value":2808},{"type":20,"tag":53,"props":2978,"children":2979},{"style":469},[2980],{"type":26,"value":472},{"type":20,"tag":53,"props":2982,"children":2983},{"class":55,"line":349},[2984,2988,2992,2996,3000,3004,3008],{"type":20,"tag":53,"props":2985,"children":2986},{"style":60},[2987],{"type":26,"value":2820},{"type":20,"tag":53,"props":2989,"children":2990},{"style":483},[2991],{"type":26,"value":486},{"type":20,"tag":53,"props":2993,"children":2994},{"style":2053},[2995],{"type":26,"value":2457},{"type":20,"tag":53,"props":2997,"children":2998},{"style":483},[2999],{"type":26,"value":1737},{"type":20,"tag":53,"props":3001,"children":3002},{"style":60},[3003],{"type":26,"value":2466},{"type":20,"tag":53,"props":3005,"children":3006},{"style":483},[3007],{"type":26,"value":1737},{"type":20,"tag":53,"props":3009,"children":3010},{"style":60},[3011],{"type":26,"value":2475},{"type":20,"tag":53,"props":3013,"children":3014},{"class":55,"line":358},[3015],{"type":20,"tag":53,"props":3016,"children":3017},{"emptyLinePlaceholder":124},[3018],{"type":26,"value":127},{"type":20,"tag":53,"props":3020,"children":3021},{"class":55,"line":367},[3022,3026],{"type":20,"tag":53,"props":3023,"children":3024},{"style":452},[3025],{"type":26,"value":2280},{"type":20,"tag":53,"props":3027,"children":3028},{"style":469},[3029],{"type":26,"value":472},{"type":20,"tag":53,"props":3031,"children":3032},{"class":55,"line":376},[3033,3038,3043,3047,3052],{"type":20,"tag":53,"props":3034,"children":3035},{"style":60},[3036],{"type":26,"value":3037},"    id",{"type":20,"tag":53,"props":3039,"children":3040},{"style":483},[3041],{"type":26,"value":3042},"     =",{"type":20,"tag":53,"props":3044,"children":3045},{"style":489},[3046],{"type":26,"value":492},{"type":20,"tag":53,"props":3048,"children":3049},{"style":495},[3050],{"type":26,"value":3051},"archive-old-logs",{"type":20,"tag":53,"props":3053,"children":3054},{"style":489},[3055],{"type":26,"value":503},{"type":20,"tag":53,"props":3057,"children":3058},{"class":55,"line":385},[3059,3063,3067,3071,3075],{"type":20,"tag":53,"props":3060,"children":3061},{"style":60},[3062],{"type":26,"value":2922},{"type":20,"tag":53,"props":3064,"children":3065},{"style":483},[3066],{"type":26,"value":486},{"type":20,"tag":53,"props":3068,"children":3069},{"style":489},[3070],{"type":26,"value":492},{"type":20,"tag":53,"props":3072,"children":3073},{"style":495},[3074],{"type":26,"value":2935},{"type":20,"tag":53,"props":3076,"children":3077},{"style":489},[3078],{"type":26,"value":503},{"type":20,"tag":53,"props":3080,"children":3081},{"class":55,"line":393},[3082],{"type":20,"tag":53,"props":3083,"children":3084},{"emptyLinePlaceholder":124},[3085],{"type":26,"value":127},{"type":20,"tag":53,"props":3087,"children":3088},{"class":55,"line":402},[3089,3094],{"type":20,"tag":53,"props":3090,"children":3091},{"style":452},[3092],{"type":26,"value":3093},"    transition",{"type":20,"tag":53,"props":3095,"children":3096},{"style":469},[3097],{"type":26,"value":472},{"type":20,"tag":53,"props":3099,"children":3100},{"class":55,"line":411},[3101,3106,3111],{"type":20,"tag":53,"props":3102,"children":3103},{"style":60},[3104],{"type":26,"value":3105},"      days",{"type":20,"tag":53,"props":3107,"children":3108},{"style":483},[3109],{"type":26,"value":3110},"          =",{"type":20,"tag":53,"props":3112,"children":3114},{"style":3113},"--shiki-light:#F76D47;--shiki-default:#005CC5;--shiki-dark:#79B8FF",[3115],{"type":26,"value":3116}," 90\n",{"type":20,"tag":53,"props":3118,"children":3119},{"class":55,"line":1085},[3120,3125,3129,3133,3138],{"type":20,"tag":53,"props":3121,"children":3122},{"style":60},[3123],{"type":26,"value":3124},"      storage_class",{"type":20,"tag":53,"props":3126,"children":3127},{"style":483},[3128],{"type":26,"value":486},{"type":20,"tag":53,"props":3130,"children":3131},{"style":489},[3132],{"type":26,"value":492},{"type":20,"tag":53,"props":3134,"children":3135},{"style":495},[3136],{"type":26,"value":3137},"GLACIER",{"type":20,"tag":53,"props":3139,"children":3140},{"style":489},[3141],{"type":26,"value":503},{"type":20,"tag":53,"props":3143,"children":3144},{"class":55,"line":1093},[3145],{"type":20,"tag":53,"props":3146,"children":3147},{"style":469},[3148],{"type":26,"value":2229},{"type":20,"tag":53,"props":3150,"children":3151},{"class":55,"line":1114},[3152],{"type":20,"tag":53,"props":3153,"children":3154},{"emptyLinePlaceholder":124},[3155],{"type":26,"value":127},{"type":20,"tag":53,"props":3157,"children":3158},{"class":55,"line":1139},[3159,3164],{"type":20,"tag":53,"props":3160,"children":3161},{"style":452},[3162],{"type":26,"value":3163},"    expiration",{"type":20,"tag":53,"props":3165,"children":3166},{"style":469},[3167],{"type":26,"value":472},{"type":20,"tag":53,"props":3169,"children":3170},{"class":55,"line":1151},[3171,3175,3179,3184],{"type":20,"tag":53,"props":3172,"children":3173},{"style":60},[3174],{"type":26,"value":3105},{"type":20,"tag":53,"props":3176,"children":3177},{"style":483},[3178],{"type":26,"value":486},{"type":20,"tag":53,"props":3180,"children":3181},{"style":3113},[3182],{"type":26,"value":3183}," 2555",{"type":20,"tag":53,"props":3185,"children":3186},{"style":443},[3187],{"type":26,"value":3188},"  # 7 years retention for compliance\n",{"type":20,"tag":53,"props":3190,"children":3191},{"class":55,"line":1175},[3192],{"type":20,"tag":53,"props":3193,"children":3194},{"style":469},[3195],{"type":26,"value":2229},{"type":20,"tag":53,"props":3197,"children":3198},{"class":55,"line":1200},[3199],{"type":20,"tag":53,"props":3200,"children":3201},{"style":469},[3202],{"type":26,"value":574},{"type":20,"tag":53,"props":3204,"children":3205},{"class":55,"line":1208},[3206],{"type":20,"tag":53,"props":3207,"children":3208},{"style":469},[3209],{"type":26,"value":582},{"type":20,"tag":35,"props":3211,"children":3213},{"id":3212},"iso-27001-control-mapping",[3214],{"type":26,"value":3215},"ISO 27001 Control Mapping",{"type":20,"tag":3217,"props":3218,"children":3219},"table",{},[3220,3244],{"type":20,"tag":3221,"props":3222,"children":3223},"thead",{},[3224],{"type":20,"tag":3225,"props":3226,"children":3227},"tr",{},[3228,3234,3239],{"type":20,"tag":3229,"props":3230,"children":3231},"th",{},[3232],{"type":26,"value":3233},"ISO 27001 Control",{"type":20,"tag":3229,"props":3235,"children":3236},{},[3237],{"type":26,"value":3238},"AWS Service",{"type":20,"tag":3229,"props":3240,"children":3241},{},[3242],{"type":26,"value":3243},"Implementation",{"type":20,"tag":3245,"props":3246,"children":3247},"tbody",{},[3248,3267,3285,3303,3321,3339,3357],{"type":20,"tag":3225,"props":3249,"children":3250},{},[3251,3257,3262],{"type":20,"tag":3252,"props":3253,"children":3254},"td",{},[3255],{"type":26,"value":3256},"A.5 - Information Security Policies",{"type":20,"tag":3252,"props":3258,"children":3259},{},[3260],{"type":26,"value":3261},"IAM, SCP",{"type":20,"tag":3252,"props":3263,"children":3264},{},[3265],{"type":26,"value":3266},"Service Control Policies at org level",{"type":20,"tag":3225,"props":3268,"children":3269},{},[3270,3275,3280],{"type":20,"tag":3252,"props":3271,"children":3272},{},[3273],{"type":26,"value":3274},"A.9 - Access Control",{"type":20,"tag":3252,"props":3276,"children":3277},{},[3278],{"type":26,"value":3279},"IAM, MFA",{"type":20,"tag":3252,"props":3281,"children":3282},{},[3283],{"type":26,"value":3284},"Least privilege + mandatory MFA",{"type":20,"tag":3225,"props":3286,"children":3287},{},[3288,3293,3298],{"type":20,"tag":3252,"props":3289,"children":3290},{},[3291],{"type":26,"value":3292},"A.10 - Cryptography",{"type":20,"tag":3252,"props":3294,"children":3295},{},[3296],{"type":26,"value":3297},"KMS, ACM",{"type":20,"tag":3252,"props":3299,"children":3300},{},[3301],{"type":26,"value":3302},"Encryption at rest and in transit",{"type":20,"tag":3225,"props":3304,"children":3305},{},[3306,3311,3316],{"type":20,"tag":3252,"props":3307,"children":3308},{},[3309],{"type":26,"value":3310},"A.12 - Operations Security",{"type":20,"tag":3252,"props":3312,"children":3313},{},[3314],{"type":26,"value":3315},"CloudTrail, Config",{"type":20,"tag":3252,"props":3317,"children":3318},{},[3319],{"type":26,"value":3320},"Full audit trail + compliance rules",{"type":20,"tag":3225,"props":3322,"children":3323},{},[3324,3329,3334],{"type":20,"tag":3252,"props":3325,"children":3326},{},[3327],{"type":26,"value":3328},"A.13 - Communications Security",{"type":20,"tag":3252,"props":3330,"children":3331},{},[3332],{"type":26,"value":3333},"VPC, Security Groups",{"type":20,"tag":3252,"props":3335,"children":3336},{},[3337],{"type":26,"value":3338},"Network segmentation + flow logs",{"type":20,"tag":3225,"props":3340,"children":3341},{},[3342,3347,3352],{"type":20,"tag":3252,"props":3343,"children":3344},{},[3345],{"type":26,"value":3346},"A.16 - Incident Management",{"type":20,"tag":3252,"props":3348,"children":3349},{},[3350],{"type":26,"value":3351},"GuardDuty, Security Hub",{"type":20,"tag":3252,"props":3353,"children":3354},{},[3355],{"type":26,"value":3356},"Automated detection and alerting",{"type":20,"tag":3225,"props":3358,"children":3359},{},[3360,3365,3370],{"type":20,"tag":3252,"props":3361,"children":3362},{},[3363],{"type":26,"value":3364},"A.18 - Compliance",{"type":20,"tag":3252,"props":3366,"children":3367},{},[3368],{"type":26,"value":3369},"Config, Security Hub",{"type":20,"tag":3252,"props":3371,"children":3372},{},[3373],{"type":26,"value":3374},"Continuous compliance monitoring",{"type":20,"tag":35,"props":3376,"children":3378},{"id":3377},"results",[3379],{"type":26,"value":3380},"Results",{"type":20,"tag":3382,"props":3383,"children":3384},"ul",{},[3385,3397,3407,3417],{"type":20,"tag":3386,"props":3387,"children":3388},"li",{},[3389,3395],{"type":20,"tag":3390,"props":3391,"children":3392},"strong",{},[3393],{"type":26,"value":3394},"Achieved ISO 27001 compliance readiness",{"type":26,"value":3396}," with automated evidence collection",{"type":20,"tag":3386,"props":3398,"children":3399},{},[3400,3405],{"type":20,"tag":3390,"props":3401,"children":3402},{},[3403],{"type":26,"value":3404},"90+ Config rules",{"type":26,"value":3406}," enforcing security controls continuously",{"type":20,"tag":3386,"props":3408,"children":3409},{},[3410,3415],{"type":20,"tag":3390,"props":3411,"children":3412},{},[3413],{"type":26,"value":3414},"\u003C 24 hour remediation",{"type":26,"value":3416}," for high-severity findings via automated alerting",{"type":20,"tag":3386,"props":3418,"children":3419},{},[3420,3425],{"type":20,"tag":3390,"props":3421,"children":3422},{},[3423],{"type":26,"value":3424},"Zero audit findings",{"type":26,"value":3426}," from external auditors on infrastructure controls",{"type":20,"tag":3428,"props":3429,"children":3430},"style",{},[3431],{"type":26,"value":3432},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":7,"searchDepth":66,"depth":66,"links":3434},[3435,3436,3437,3438,3439,3440],{"id":37,"depth":66,"text":40},{"id":420,"depth":66,"text":423},{"id":1627,"depth":66,"text":1630},{"id":2378,"depth":66,"text":2381},{"id":3212,"depth":66,"text":3215},{"id":3377,"depth":66,"text":3380},"markdown","content:codes:iso27001-aws-config.md","content","codes/iso27001-aws-config.md","codes/iso27001-aws-config","md",1782460598425]