Controls
8 controls from HIPAA Omnibus Rule 2013 apply to this module.
| Control | Clause | Change |
|---|---|---|
| Attached EBS volumes should have encryption enabledebs_attached_volume_encryption_enabled 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) | |
| EBS volumes should have encryption at rest enabledebs_volume_encryption_at_rest_enabled 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) | |
| EC2 instances should have detailed monitoring enabledec2_instance_detailed_monitoring_enabled 164.312(b) | 164.312(b) | |
| EC2 instances should have EBS optimization enabledec2_instance_ebs_optimized 164.312(a)(2)(ii) | 164.312(a)(2)(ii) | |
| EC2 instances should have IAM profile attachedec2_instance_iam_profile_attached 164.312(a)(1) | 164.312(a)(1) | |
| EC2 instances should be in a VPCec2_instance_in_vpc 164.312(e)(1) | 164.312(e)(1) | |
| EC2 instances should not have a public IP addressec2_instance_not_publicly_accessible 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) | |
| EC2 instances should use IMDSv2ec2_instance_uses_imdsv2 164.312(a)(1) | 164.312(a)(1) |