NIST

[Work In Progress] The NIST Special Publication 800-53 Revision 5 provides a catalog of security and privacy controls for federal information systems and organizations to protect organizational operations and assets, individuals, other organizations, and the Nation from a diverse set of threats including hostile cyber attacks, natural disasters, structural failures, and human errors.
Read more

Category	Rule ID	Compliance Status	Description	Reference
Account.	1	Need Attention	[hasAlternateContact] - Configure AWS account contacts [GLOBAL]Account::Config	Alternate Contact
Account.	2	Compliant	[hasOrganization]
ACM.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
APIGateway.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
APIGateway.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
APIGateway.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
APIGateway.	4	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
APIGateway.	5	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
APIGateway.	8	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
APIGateway.	9	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Appsync.	5	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Autoscaling.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Autoscaling.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Autoscaling.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Autoscaling.	5	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Autoscaling.	6	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Autoscaling.	9	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Backup.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
CloudFront.	1	Need Attention	[defaultRootObject] - Specify a default root object for your distribution. [GLOBAL]Cloudfront::E2X390QMMYIRUF	AWS Docs
CloudFront.	3	Need Attention	[viewerPolicyHttps] - Configure one or more cache behaviors in your CloudFront distribution to require HTTPS for communication between viewers and CloudFront. [GLOBAL]Cloudfront::E2X390QMMYIRUF	AWS Docs
CloudFront.	4	Need Attention	[originFailover] - Create an origin group with two origins: a primary and a secondary. [GLOBAL]Cloudfront::E2X390QMMYIRUF	AWS Docs
CloudFront.	5	Need Attention	[accessLogging] - Enable CloudFront standard logs (access logs) [GLOBAL]Cloudfront::E2X390QMMYIRUF	AWS Docs
CloudFront.	6	Need Attention	[WAFAssociation] - Use Web Application Firewall (WAF) for enhanced security. [GLOBAL]Cloudfront::E2X390QMMYIRUF	AWS Docs Developer Guide
CloudFront.	7	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
CloudFront.	8	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
CloudFront.	9	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
CloudFront.	10	Compliant	[DeprecatedSSLProtocol]
CloudFront.	12	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
CloudFront.	13	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
CloudFront.	14	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
CloudTrail.	1	Compliant	[HasOneMultiRegionTrail]
CloudTrail.	2	Need Attention	[RequiresKmsKey] - Enable SSE [ap-southeast-1]Cloudtrail::IsengardTrail-DO-NOT-DELETE	Encrypt CloudTrail using AWS KMS CloudTrail Security Best Practices
CloudTrail.	4	Compliant	[LogFileValidationEnabled]
CloudTrail.	5	Need Attention	[CloudWatchLogsLogGroupArn] - CloudWatch for CloudTrail [ap-southeast-1]Cloudtrail::IsengardTrail-DO-NOT-DELETE	Using CloudWatch Logs with CloudTrail
CloudWatch.	15	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
CloudWatch.	16	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
CloudWatch.	17	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
CodeBuild.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
CodeBuild.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
CodeBuild.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
CodeBuild.	4	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Config.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
DMS.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
DMS.	6	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
DMS.	7	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
DMS.	8	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
DMS.	9	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
DocumentDB.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
DocumentDB.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
DocumentDB.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
DocumentDB.	4	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
DocumentDB.	5	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
DynamoDB.	1	Compliant	[autoScalingStatus]
DynamoDB.	2	Compliant	[disabledPointInTimeRecovery]
DynamoDB.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
DynamoDB.	4	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
DynamoDB.	5	Compliant	[resourcesWithoutTags]
DynamoDB.	6	Compliant	[deleteTableProtection]
EC2.	1	Compliant	[EBSSnapshotIsPublic]
EC2.	2	Need Attention	[SGDefaultDisallowTraffic] - Default Security Group with Rules [ap-southeast-1]SG::sg-34753642 [us-east-1]SG::sg-9b3e45a4	VPC default security group rules
EC2.	3	Compliant	[EBSInUse] [EBSEncrypted]
EC2.	4	Compliant	[EC2Active]
EC2.	5	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EC2.	6	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EC2.	7	Compliant	[EBSEncrypted]
EC2.	8	Compliant	[ASGIMDSv2]
EC2.	9	Compliant	[EC2InstancePublicIP]
EC2.	10	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EC2.	12	Compliant	[EC2EIPNotInUse]
EC2.	13	Compliant	[SGSensitivePortOpenToAll] [SGAllPortOpenToAll]
EC2.	15	Compliant	[EC2SubnetAutoPublicIP]
EC2.	16	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EC2.	17	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EC2.	18	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EC2.	19	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EC2.	20	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EC2.	21	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EC2.	23	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EC2.	24	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EC2.	25	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EC2.	28	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EC2.	51	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ECR.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ECR.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ECR.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ECS.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ECS.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ECS.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ECS.	4	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ECS.	5	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ECS.	8	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ECS.	9	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ECS.	10	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ECS.	12	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EFS.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EFS.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EFS.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EFS.	4	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EKS.	1	Compliant	[eksEndpointPublicAccess]
EKS.	2	Compliant	[eksClusterVersionEol]
EKS.	8	Compliant	[eksClusterLogging]
ElastiCache.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ElastiCache.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ElastiCache.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ElastiCache.	4	Compliant	[EncInTransitAndRest]
ElastiCache.	5	Compliant	[EncInTransitAndRest]
ElastiCache.	6	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ElastiCache.	7	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ElasticBeanstalk.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ElasticBeanstalk.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ELB.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ELB.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ELB.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ELB.	4	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ELB.	5	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ELB.	6	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ELB.	7	Compliant	[ELBConnectionDraining]
ELB.	8	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ELB.	9	Compliant	[ELBCrossZone]
ELB.	10	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ELB.	12	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ELB.	13	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ELB.	14	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ELB.	16	Compliant	[ELBEnableWAF]
EMR.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EMR.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ES.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ES.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ES.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ES.	4	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ES.	5	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ES.	6	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ES.	7	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
ES.	8	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EventBridge.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
EventBridge.	4	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
FSx.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
GuardDuty.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
IAM.	1	Need Attention	[FullAdminAccess] - Limit permissions. [GLOBAL]Role::AWSReservedSSO_AWSAdministratorAccess_fae89f7963febc98, Role::DojoEC2AdminRole, Role::EC2AdminRole, Role::itadmin, Role::OrganizationAccountAccessRole, Role::PACICloudFormationStackSetExecutionRole, Role::ServiceScreenerAutomationRole, Role::stacksets-exec-7ca18804340a75b25a831ca17fba8659	AWS Docs Organization GuardRail Blog
IAM.	2	Need Attention	[userNotUsingGroup] - Place IAM user within User Group [GLOBAL]User::kuettai [InlinePolicy] - Use managed policies [GLOBAL]User::kuettai, Role::AccessAnalyzerTrustedService, Role::AVMContainersUserRole, Role::awslogs.prod.kelex.molecule.toppatterns, Role::CloudSecAuditRole, Role::CloudSeerTrustedServiceRole, Role::CodeGuruProfilerForwardToAmazonProfiler, Role::CodeStarWorker-dojo-CloudFormation, Role::CodeStarWorker-dojo-ToolChain, Role::CodeStarWorker-dojo-WebApp, Role::Cognito_dojoIdPAuth_Role, Role::Cognito_dojoIdPUnauth_Role, Role::DocumentUnderstandingSolutionCICD-CodeBuildRole-26NRX1QIOV08, Role::EC2AdminRole, Role::IMDSv2-automigrator, Role::OrthancRole, Role::PACICloudFormationStackSetAdministrationRole, Role::SaltyTrustedService, Role::ServiceScreenerAssumeRole, Role::ShadowTrooperRole, Role::TurtleRoleManagement	IAM Group AWS Docs
IAM.	3	Compliant	[hasAccessKeyNoRotate90days]
IAM.	4	Compliant	[rootHasAccessKey]
IAM.	5	Compliant	[mfaActive]
IAM.	6	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
IAM.	7	Compliant	[passwordPolicyWeak]
IAM.	8	Compliant	[consoleLastAccess90] [consoleLastAccess365]
IAM.	9	Need Attention	[rootMfaActive] - Enable MFA on root user [GLOBAL]User::root_id	AWS MFA IAM Best Practices
IAM.	19	Compliant	[mfaActive]
IAM.	21	Need Attention	[ManagedPolicyFullAccessOneServ] - Limit permissions. [GLOBAL]Role::CodeStarWorker-dojo-ToolChain, Role::OrthancRole	AWS Docs
Kinesis.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
KMS.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
KMS.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
KMS.	3	Compliant	[KeyInPendingDeletion]
KMS.	4	Compliant	[KeyRotationEnabled]
Lambda.	1	Compliant	[lambdaPublicAccess]
Lambda.	2	Need Attention	[lambdaRuntimeUpdate] - Runtime Update Available [ap-southeast-1]Lambda::isengard-create-vpc-endpoints-for-ssm, Lambda::webScrapNew, Lambda::webScrapper, Lambda::isengard-create-inventory-association, Lambda::testFunction, Lambda::isengard-set-default-instance-role, Lambda::isengard-set-default-patch-baseline [us-east-1]Lambda::isengard-set-default-instance-role, Lambda::isengard-create-vpc-endpoints-for-ssm, Lambda::isengard-set-default-patch-baseline, Lambda::isengard-create-inventory-association	Lambda runtimes
Lambda.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Lambda.	5	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Macie.	1	Need Attention	[MacieToEnable] - Enable Macie [ap-southeast-1]Macie [us-east-1]Macie	Getting started with Amazon Macie
Macie.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
MSK.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
MSK.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
MQ.	5	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
MQ.	6	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Neptune.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Neptune.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Neptune.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Neptune.	4	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Neptune.	5	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Neptune.	6	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Neptune.	7	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Neptune.	8	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Neptune.	9	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
NetworkFirewall.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
NetworkFirewall.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
NetworkFirewall.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
NetworkFirewall.	4	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
NetworkFirewall.	5	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
NetworkFirewall.	6	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
NetworkFirewall.	9	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Opensearch.	1	Compliant	[EncyptionAtRest]
Opensearch.	2	Compliant	[DomainWithinVPC]
Opensearch.	3	Compliant	[NodeToNodeEncryption]
Opensearch.	4	Compliant	[ApplicationLogs]
Opensearch.	5	Compliant	[AuditLogs]
Opensearch.	6	Compliant	[DataNodes]
Opensearch.	7	Compliant	[FineGrainedAccessControl]
Opensearch.	8	Compliant	[TLSEnforced]
Opensearch.	10	Compliant	[ServiceSoftwareVersion]
PCA.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
RDS.	1	Compliant	[SnapshotRDSIsPublic]
RDS.	2	Compliant	[PubliclyAccessible]
RDS.	3	Compliant	[StorageEncrypted]
RDS.	4	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
RDS.	5	Compliant	[MultiAZ]
RDS.	6	Compliant	[EnhancedMonitor]
RDS.	7	Compliant	[DeleteProtection]
RDS.	8	Compliant	[DeleteProtection]
RDS.	9	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
RDS.	10	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
RDS.	11	Compliant	[Backup]
RDS.	12	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
RDS.	13	Compliant	[AutoMinorVersionUpgrade]
RDS.	14	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
RDS.	15	Compliant	[MultiAZ]
RDS.	16	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
RDS.	17	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
RDS.	18	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
RDS.	19	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
RDS.	20	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
RDS.	21	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
RDS.	22	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
RDS.	23	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
RDS.	24	Compliant	[DefaultMasterAdmin]
RDS.	25	Compliant	[DefaultMasterAdmin]
RDS.	26	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
RDS.	27	Compliant	[StorageEncrypted]
RDS.	34	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
RDS.	35	Compliant	[AutoMinorVersionUpgrade]
Redshift.	1	Compliant	[PubliclyAcessible]
Redshift.	2	Compliant	[EncryptedInTransit]
Redshift.	3	Compliant	[AutomaticSnapshots]
Redshift.	4	Compliant	[AuditLogging]
Redshift.	6	Compliant	[AutomaticUpgrades]
Redshift.	7	Compliant	[EnhancedVPCRouting]
Redshift.	8	Compliant	[DefaultAdminUsername]
Redshift.	9	Compliant	[DefaultDatabaseName]
Redshift.	10	Compliant	[EncryptedAtRest]
Route53.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
S3.	1	Compliant	[S3AccountPublicAccessBlock]
S3.	2	Compliant	[PublicAccessBlock]
S3.	3	Compliant	[PublicAccessBlock]
S3.	5	Need Attention	[TlsEnforced] - Enforce Encryption of Data in Transit [ap-southeast-1]Bucket::aws-codestar-ap-southeast-1-961319563195, Bucket::aws-codestar-ap-southeast-1-961319563195-dojo-pipe, Bucket::codepipeline-ap-southeast-1-183991447891, Bucket::config-bucket-961319563195, Bucket::documentunderstandingsolutioncic-artifacts3bucket-dtr9a8q6yj2h, Bucket::documentunderstandingsolutioncicd-devoutputbucket-1m11zxjc9fhd6, Bucket::dojo-logs, Bucket::kuettai-solutions-bucket-ap-southeast-1 [us-east-1]Bucket::cloudtrail-awslogs-961319563195-pyvnhwtz-isengard-do-not-delete, Bucket::kuettai-dojo01	AWS Docs
S3.	7	Compliant	[CrossRegionReplication]
S3.	8	Compliant	[PublicAccessBlock]
S3.	9	Need Attention	[BucketLogging] - Enable Server Access Logging [ap-southeast-1]Bucket::aws-codestar-ap-southeast-1-961319563195, Bucket::aws-codestar-ap-southeast-1-961319563195-dojo-pipe, Bucket::codepipeline-ap-southeast-1-183991447891, Bucket::config-bucket-961319563195, Bucket::documentunderstandingsolutioncic-artifacts3bucket-dtr9a8q6yj2h, Bucket::documentunderstandingsolutioncicd-devoutputbucket-1m11zxjc9fhd6, Bucket::dojo-logs, Bucket::kuettai-solutions-bucket-ap-southeast-1 [us-east-1]Bucket::cloudtrail-awslogs-961319563195-pyvnhwtz-isengard-do-not-delete, Bucket::kuettai-dojo01	AWS Docs
S3.	10	Need Attention	[BucketVersioning] - Enable Versioning [ap-southeast-1]Bucket::aws-codestar-ap-southeast-1-961319563195, Bucket::codepipeline-ap-southeast-1-183991447891, Bucket::config-bucket-961319563195, Bucket::documentunderstandingsolutioncicd-devoutputbucket-1m11zxjc9fhd6, Bucket::dojo-logs, Bucket::kuettai-solutions-bucket-ap-southeast-1 [us-east-1]Bucket::cloudtrail-awslogs-961319563195-pyvnhwtz-isengard-do-not-delete, Bucket::kuettai-dojo01 [BucketLifecycle] - Configure Lifecycle Policies [ap-southeast-1]Bucket::aws-codestar-ap-southeast-1-961319563195, Bucket::aws-codestar-ap-southeast-1-961319563195-dojo-pipe, Bucket::codepipeline-ap-southeast-1-183991447891, Bucket::config-bucket-961319563195, Bucket::documentunderstandingsolutioncic-artifacts3bucket-dtr9a8q6yj2h, Bucket::documentunderstandingsolutioncicd-devoutputbucket-1m11zxjc9fhd6, Bucket::dojo-logs, Bucket::kuettai-solutions-bucket-ap-southeast-1 [us-east-1]Bucket::kuettai-dojo01	AWS Docs Manage Versioning Example AWS Docs
S3.	11	Compliant	[EventNotification]
S3.	12	Need Attention	[AccessControlList] - Enable SSE [ap-southeast-1]Bucket::documentunderstandingsolutioncic-artifacts3bucket-dtr9a8q6yj2h, Bucket::documentunderstandingsolutioncicd-devoutputbucket-1m11zxjc9fhd6, Bucket::kuettai-solutions-bucket-ap-southeast-1 [us-east-1]Bucket::kuettai-dojo01	Protecting data with IAM
S3.	13	Need Attention	[BucketLifecycle] - Configure Lifecycle Policies [ap-southeast-1]Bucket::aws-codestar-ap-southeast-1-961319563195, Bucket::aws-codestar-ap-southeast-1-961319563195-dojo-pipe, Bucket::codepipeline-ap-southeast-1-183991447891, Bucket::config-bucket-961319563195, Bucket::documentunderstandingsolutioncic-artifacts3bucket-dtr9a8q6yj2h, Bucket::documentunderstandingsolutioncicd-devoutputbucket-1m11zxjc9fhd6, Bucket::dojo-logs, Bucket::kuettai-solutions-bucket-ap-southeast-1 [us-east-1]Bucket::kuettai-dojo01	AWS Docs
S3.	14	Need Attention	[BucketVersioning] - Enable Versioning [ap-southeast-1]Bucket::aws-codestar-ap-southeast-1-961319563195, Bucket::codepipeline-ap-southeast-1-183991447891, Bucket::config-bucket-961319563195, Bucket::documentunderstandingsolutioncicd-devoutputbucket-1m11zxjc9fhd6, Bucket::dojo-logs, Bucket::kuettai-solutions-bucket-ap-southeast-1 [us-east-1]Bucket::cloudtrail-awslogs-961319563195-pyvnhwtz-isengard-do-not-delete, Bucket::kuettai-dojo01	AWS Docs Manage Versioning Example
S3.	15	Need Attention	[ObjectLock] - Enable Object Lock [ap-southeast-1]Bucket::aws-codestar-ap-southeast-1-961319563195, Bucket::aws-codestar-ap-southeast-1-961319563195-dojo-pipe, Bucket::codepipeline-ap-southeast-1-183991447891, Bucket::config-bucket-961319563195, Bucket::documentunderstandingsolutioncic-artifacts3bucket-dtr9a8q6yj2h, Bucket::documentunderstandingsolutioncicd-devoutputbucket-1m11zxjc9fhd6, Bucket::dojo-logs, Bucket::kuettai-solutions-bucket-ap-southeast-1 [us-east-1]Bucket::cloudtrail-awslogs-961319563195-pyvnhwtz-isengard-do-not-delete, Bucket::kuettai-dojo01	AWS Docs
S3.	17	Compliant	[ServerSideEncrypted] [SSEWithKMS]
S3.	19	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
S3.	20	Need Attention	[MFADelete] - Enable MFA Delete [ap-southeast-1]Bucket::aws-codestar-ap-southeast-1-961319563195, Bucket::aws-codestar-ap-southeast-1-961319563195-dojo-pipe, Bucket::codepipeline-ap-southeast-1-183991447891, Bucket::config-bucket-961319563195, Bucket::documentunderstandingsolutioncic-artifacts3bucket-dtr9a8q6yj2h, Bucket::documentunderstandingsolutioncicd-devoutputbucket-1m11zxjc9fhd6, Bucket::dojo-logs, Bucket::kuettai-solutions-bucket-ap-southeast-1 [us-east-1]Bucket::cloudtrail-awslogs-961319563195-pyvnhwtz-isengard-do-not-delete, Bucket::kuettai-dojo01	Prevention for Accidental Deletions on S3 AWS Docs
Sagemaker.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Sagemaker.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
Sagemaker.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
SecretsManager.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
SecretsManager.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
SecretsManager.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
SecretsManager.	4	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
SNS.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
SQS.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
SSM.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
SSM.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
SSM.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
SSM.	4	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
WAF.	1	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
WAF.	2	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
WAF.	3	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
WAF.	4	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
WAF.	5	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
WAF.	6	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
WAF.	7	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
WAF.	8	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
WAF.	10	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
WAF.	11	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.
WAF.	12	Not available	Please refer to the NIST control section for further details. Kindly provide evidence or artifacts demonstrating compliance with the respective NIST control.