Controls
8 controls from HIPAA Omnibus Rule 2013 apply to this module.
| Control | Clause | Change |
|---|---|---|
| S3 buckets should have cross-region replication enableds3_bucket_cross_region_replication_enabled 164.312(a)(2)(ii) | 164.312(a)(2)(ii) | |
| S3 buckets should have default encryption enabled using KMSs3_bucket_default_encryption_enabled_kms 164.314(b)(2)(iv) | 164.314(b)(2)(iv) | |
| S3 buckets should have logging enableds3_bucket_logging_enabled 164.308(a)(1)(ii)(D) | 164.308(a)(1)(ii)(D) | |
| S3 buckets should not be accessible to all authenticated userss3_bucket_not_accessible_to_all_authenticated_user 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) | |
| S3 buckets should have object lock enableds3_bucket_object_lock_enabled 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) | |
| S3 buckets should have versioning enableds3_bucket_versioning_enabled 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) | |
| S3 public access should be blocked at account levels3_public_access_block_account 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) | |
| S3 public access should be blocked at bucket levels3_public_access_block_bucket 164.312(e)(1) | 164.312(e)(1) |