Controls
7 controls from FedRAMP Moderate Baseline Rev 4 apply to this module.
| Control | Clause | Change |
|---|---|---|
| CloudWatch log groups should have retention period of at least 365 dayscloudwatch_log_group_retention_period_365 AU-6(1)(3) | AU-6(1)(3) | |
| ECR repositories should have image scan on push enabledecr_repository_image_scan_on_push_enabled RA-5 | RA-5 | |
| Lambda functions should have concurrent execution limit configuredlambda_function_concurrent_execution_limit_configured None | None | |
| Lambda functions should be configured with a dead-letter queuelambda_function_dead_letter_queue_configured None | None | |
| Lambda functions should be in a VPClambda_function_in_vpc None | None | |
| Lambda functions should restrict public URLlambda_function_restrict_public_url AC-17(1) | AC-17(1) | |
| Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled None | None |