Controls
9 controls from HIPAA Omnibus Rule 2013 apply to this module.
| Control | Clause | Change |
|---|---|---|
| CloudWatch log groups should have retention period of at least 365 dayscloudwatch_log_group_retention_period_365 164.312(b) | 164.312(b) | |
| Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) | |
| Redshift clusters should have audit logging enabledredshift_cluster_audit_logging_enabled 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) | |
| Redshift clusters should have automatic snapshots enabledredshift_cluster_automatic_snapshots_min_7_days 164.308(a)(4)(ii)(A) | 164.308(a)(4)(ii)(A) | |
| Redshift cluster encryption in transit should be enabledredshift_cluster_encryption_in_transit_enabled 164.314(b)(2)(iv) | 164.314(b)(2)(iv) | |
| Redshift clusters should have enhanced VPC routing enabledredshift_cluster_enhanced_vpc_routing_enabled 164.312(e)(1) | 164.312(e)(1) | |
| Redshift clusters should have KMS encryption enabledredshift_cluster_kms_enabled 164.314(b)(2)(iv) | 164.314(b)(2)(iv) | |
| Redshift clusters should have required maintenance settingsredshift_cluster_maintenance_settings_check 164.308(a)(4)(ii)(A) | 164.308(a)(4)(ii)(A) | |
| Redshift clusters should prohibit public accessredshift_cluster_prohibit_public_access 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) |