CyberStrikeus/CyberStrike - Page 180

cis-aws-compute-2-10

Ensure unused ENIs are removed

cis-aws-compute-2-11

Ensure instances stopped for over 90 days are removed

cis-aws-compute-2-12

Ensure EBS volumes attached to an EC2 instance are marked for deletion upon instance termination

cis-aws-compute-2-13

Ensure Secrets and Sensitive Data are not stored directly in EC2 User Data

cis-aws-compute-2-14

Ensure EC2 Auto Scaling Groups Propagate Tags to EC2 Instances that it launches

cis-aws-compute-2-2-1

Ensure EBS volume encryption is enabled

cis-aws-compute-2-2-2

Ensure Public Access to EBS Snapshots is Disabled

cis-aws-compute-2-2-3

Ensure EBS volume snapshots are encrypted

cis-aws-compute-2-2-4

Ensure unused EBS volumes are removed

cis-aws-compute-2-3

Ensure Tag Policies are Enabled

cis-aws-compute-2-4

Ensure an Organizational EC2 Tag Policy has been Created

cis-aws-compute-2-5

Ensure no AWS EC2 Instances are Older than 180 days

cis-aws-compute-2-6

Ensure detailed monitoring is enabled for production EC2 Instances

cis-aws-compute-2-7

Ensure Default EC2 Security groups are not being used

cis-aws-compute-2-8

Ensure the Use of IMDSv2 is Enforced on All Existing Instances

cis-aws-compute-2-9

Ensure use of AWS Systems Manager to manage EC2 instances

cis-aws-compute-3-1

Ensure Amazon ECS task definitions using 'host' network mode do not allow privileged or root user access to the host

cis-aws-compute-3-10

Ensure Amazon ECS services are tagged

cis-aws-compute-3-11

Ensure Amazon ECS clusters are tagged

cis-aws-compute-3-12

Ensure Amazon ECS task definitions are tagged

cis-aws-compute-3-13

Ensure only trusted images are used with Amazon ECS

cis-aws-compute-3-14

Ensure 'assignPublicIp' is set to 'DISABLED' for Amazon ECS task sets

cis-aws-compute-3-2

Ensure 'assignPublicIp' is set to 'DISABLED' for Amazon ECS services

cis-aws-compute-3-3

Ensure Amazon ECS task definitions do not have 'pidMode' set to 'host'

cis-aws-compute-3-4

Ensure Amazon ECS task definitions do not have 'privileged' set to 'true'

cis-aws-compute-3-5

Ensure 'readonlyRootFilesystem' is set to 'true' for Amazon ECS task definitions

cis-aws-compute-3-6

Ensure secrets are not passed as container environment variables in Amazon ECS task definitions

cis-aws-compute-3-7

Ensure logging is configured for Amazon ECS task definitions

cis-aws-compute-3-8

Ensure Amazon ECS Fargate services are using the latest Fargate platform version

cis-aws-compute-3-9

Ensure monitoring is enabled for Amazon ECS clusters

cis-aws-compute-5-1

Apply updates to any apps running in Lightsail

cis-aws-compute-5-10

Enable storage bucket access logging

cis-aws-compute-5-11

Ensure your Windows Server based lightsail instances are updated with the latest security patches

cis-aws-compute-5-12

Change the auto-generated password for Windows based instances

cis-aws-compute-5-2

Change default Administrator login names and passwords for applications

cis-aws-compute-5-3

Disable SSH and RDP ports for Lightsail instances when not needed

cis-aws-compute-5-4

Ensure SSH is restricted to only IP address that should have this access

cis-aws-compute-5-5

Ensure RDP is restricted to only IP address that should have this access

cis-aws-compute-5-6

Disable IPv6 Networking if not in use within your organization

cis-aws-compute-5-7

Ensure you are using an IAM policy to manage access to buckets in Lightsail