CyberStrikeus/CyberStrike - Page 177

cis-apache-2-1

Ensure Only Necessary Authentication and Authorization Modules Are Enabled

cis-apache-2-2

Ensure the Log Config Module Is Enabled

cis-apache-2-3

Ensure the WebDAV Modules Are Disabled

cis-apache-2-4

Ensure the Status Module Is Disabled

cis-apache-2-5

Ensure the Autoindex Module Is Disabled

cis-apache-2-6

Ensure the Proxy Modules Are Disabled

cis-apache-2-7

Ensure the User Directories Module Is Disabled

cis-apache-2-8

Ensure the Info Module Is Disabled

cis-apache-2-9

Ensure the Basic and Digest Authentication Modules are Disabled

cis-apache-5-10

Ensure Access to .ht* Files Is Restricted

cis-apache-5-4

Ensure Default HTML Content Is Removed

cis-apache-6-5

Ensure Applicable Patches Are Applied

cis-apache-6-6

Ensure ModSecurity Is Installed and Enabled

cis-apache-6-7

Ensure the OWASP ModSecurity Core Rule Set Is Installed and Enabled

cis-apache-7-1

Ensure mod_ssl and/or mod_nss Is Installed

cis-apache-7-12

Ensure Only Cipher Suites That Provide Forward Secrecy Are Enabled

cis-apache-7-2

Ensure a Valid Trusted Certificate Is Installed

cis-apache-7-3

Ensure the Server's Private Key Is Protected

cis-apache-7-4

Ensure Weak SSL Protocols Are Disabled

cis-apache-7-5

Ensure Weak SSL/TLS Ciphers Are Disabled

cis-apache-7-6

Ensure Insecure SSL Renegotiation Is Not Enabled

cis-apache-9-1

Ensure the TimeOut Is Set Properly

cis-apache-9-2

Ensure KeepAlive Is Enabled

cis-apache-9-3

Ensure MaxKeepAliveRequests Is Set Properly

cis-apache-9-4

Ensure the KeepAliveTimeout Is Set Properly

cis-apache-9-5

Ensure the Timeout Limits for Request Headers is Set to 40 or Less

cis-apache-9-6

Ensure Timeout Limits for the Request Body Are Set Properly

cis-aws-foundations-2-1-1

Ensure centralized root access in AWS Organizations

cis-aws-foundations-2-1-2

Ensure authorization guardrails for all AWS Organization accounts

cis-aws-foundations-2-1-3

Ensure Organizations management account is not used for workloads

cis-aws-foundations-2-1-4

Ensure Organizational Units are structured by environment and sensitivity

cis-aws-foundations-2-1-5

Ensure delegated admin manages AWS Organizations policies

cis-aws-foundations-2-1-6

Ensure delegated admins manage AWS Organizations-integrated services

cis-aws-foundations-2-10

Ensure multi-factor authentication (MFA) is enabled for all IAM users that have a console password

cis-aws-foundations-2-11

Ensure credentials unused for 45 days or more are disabled

cis-aws-foundations-2-12

Ensure access keys are rotated every 90 days or less

cis-aws-foundations-2-13

Ensure IAM users receive permissions only through groups

cis-aws-foundations-2-14

Ensure IAM policies that allow full "*:*" administrative privileges are not attached

cis-aws-foundations-2-15

Ensure a support role has been created to manage incidents with AWS Support

cis-aws-foundations-2-16

Ensure IAM instance roles are used for AWS resource access from instances