Controls
11 controls from HIPAA Omnibus Rule 2013 apply to this module.
| Control | Clause | Change |
|---|---|---|
| CloudWatch log groups should have retention period of at least 365 dayscloudwatch_log_group_retention_period_365 164.312(b) | 164.312(b) | |
| Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) | |
| RDS DB instances and clusters should have enhanced monitoring enabledrds_db_instance_and_cluster_enhanced_monitoring_enabled 164.312(b) | 164.312(b) | |
| RDS DB instance backup should be enabledrds_db_instance_backup_enabled 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) | |
| RDS DB instances backup retention period should be greater than or equal to 7rds_db_instance_backup_retention_period_less_than_7 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) | |
| RDS DB instances should be integrated with CloudWatch logsrds_db_instance_cloudwatch_logs_enabled 164.308(a)(4)(ii)(A) | 164.308(a)(4)(ii)(A) | |
| RDS DB instances should have deletion protection enabledrds_db_instance_deletion_protection_enabled 164.308(a)(7)(ii)(C) | 164.308(a)(7)(ii)(C) | |
| RDS DB instance encryption at rest should be enabledrds_db_instance_encryption_at_rest_enabled 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) | |
| RDS DB instances should have iam authentication enabledrds_db_instance_iam_authentication_enabled 164.308(a)(4)(i) | 164.308(a)(4)(i) | |
| RDS DB instances should have multiple AZ enabledrds_db_instance_multiple_az_enabled 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) | |
| RDS DB instances should not use public subnetrds_db_instance_no_public_subnet 164.308(a)(3)(i) | 164.308(a)(3)(i) |