Daftar AWS Config Aturan yang Dikelola berdasarkan Ketersediaan Wilayah

• akses-kunci-diputar

• akun-bagian-organisasi

• acmpca-sertifikat-otoritas-tagged

• acm-sertifikat-kadaluarsa-cek

• acm-sertifikat-rsa-cek

• acm-sertifikat-transparan-loging-diaktifkan

• acm-pca-root-ca-dinonaktifkan

• aktif-mq-versi yang didukung

• alb-desync-mode-cek

• alb-http-drop-invalid-header-enabled

• pemeriksaan pengalihan alb-http-ke-https-

• alb-internal-skema-cek

• alb-listener-tagged

• dengan tag alb

• alb-waf-diaktifkan

• amplify-app-branch-auto-deletion-enabled

• amplify-app-build-spec-dikonfigurasi

• amplify-app-deskripsi

• amplify-app-no-variabel lingkungan

• amplify-app-platform-check

• amplify-app dengan tag

• amplify-branch-auto-build-enabled

• amplify-branch-build-spec-dikonfigurasi

• amplify-cabang-deskripsi

• amplify-branch-framework-dikonfigurasi

• amplify-branch-performance-mode-enabled

• amplify-branch-pull-request-preview-enabled

• amplify-branch-tagged

• apigatewayv2-integrasi-pribadi-https-diaktifkan

• apigatewayv2-tahap-deskripsi

• apigateway-domain-nama-tls-check

• apigateway-stage-access-logs-enabled

• apigateway-tahap-deskripsi

• api-gwv2-access-logs-enabled

• api-gwv2-otorisasi-tipe-dikonfigurasi

• api-gwv2-tahap-default-route-detailed-metrics-enabled

• api-gw-terkait-dengan-waf

• api-gw-cache-diaktifkan-dan-dienkripsi

• api-gw-endpoint-type-check

• api-gw-eksekusi-loging-diaktifkan

• dengan tag api-gw-rest-api

• api-gw-ssl-diaktifkan

• dengan tag api-gw-stage

• api-gw-xray diaktifkan

• appconfig-aplikasi-deskripsi

• appconfig-application-tagged

• appconfig-configuration-profile-tagged

• appconfig-configuration-profile-validators-tidak-kosong

• appconfig-deployment-strategy-description

• appconfig-deployment-strategy-minimum-final-bake-time

• appconfig-deployment-strategy-replicate-to-ssm

• appconfig-deployment-strategy-tagged

• appconfig-lingkungan-deskripsi

• appconfig-environment-tagged

• dengan tag appconfig-extension-association

• appconfig-freeform-profile-config-storage

• appconfig-hosted-configuration-version-description

• dengan tag appflow-flow-

• appflow-flow-trigger-type-check

• appmesh-gateway-route-tagged

• appmesh-mesh-deny-tcp-forwarding

• appmesh-mesh-ip-pref-check

• dengan tag appmesh-mesh

• dengan tag rute appmesh

• appmesh-virtual-gateway-backend-defaults-tls

• appmesh-virtual-gateway-listeners-health-check-enabled

• appmesh-virtual-gateway-logging-file-path-ada

• dengan tag appmesh-virtual-gateway

• appmesh-virtual-node-backend-defaults-tls-on

• appmesh-virtual-node-cloud-map-ip-pref-check

• appmesh-virtual-node-dns-ip-pref-check

• appmesh-virtual-node-listeners-health-check-enabled

• appmesh-virtual-node-listeners-outlier-detect-enabled

• appmesh-virtual-node-logging-file-path-ada

• appmesh-virtual-node-service-backends-tls-diberlakukan

• appmesh-virtual-node-tagged

• appmesh-virtual-router ditandai

• appmesh-virtual-service-tagged

• disetujui-amis-oleh-id

• disetujui-amis-demi-tag

• apprunner-layanan-di-vpc

• apprunner-service-ip-alamat-tipe-check

• apprunner-service-max-unhealthy-threshold

• apprunner-layanan-tidak-akses publik

• apprunner-service-observability-enabled

• apprunner-service-tagged

• apprunner-vpc-connector-tagged

• appstream-armada-dalam-vpc

• appsync-terkait-dengan-waf

• appsync-otorisasi-periksa

• appsync-cache-enkripsi-di-istirahat

• appsync-graphql-api-xray diaktifkan

• appsync-logging-diaktifkan

• aps-rule-groups-namespace-tagged

• athena-data-katalog-deskripsi

• athena-persiapan-pernyataan-deskripsi

• athena-workgroup-deskripsi

• athena-workgroup-terenkripsi-di-istirahat

• athena-workgroup-enforce-workgroup-konfigurasi

• athena-workgroup-engine-versi-auto-upgrade

• athena-workgroup-logging-enabled

• auditmanager-assesment-tagged

• aurora-global-database-enkripsi-di-istirahat

• aurora-last-backup-recovery-point-made

• aurora-bertemu-pulih-waktu-target

• aurora-mysql-backtracking-diaktifkan

• aurora-mysql-cluster-audit-logging

• aurora-sumber daya-dalam-logis-udara-gapped-vault

• aurora-sumber daya-dilindungi oleh rencana cadangan

• penyeimbangan kembali kapasitas-penskalaan otomatis

• autoscaling-group-elb-healthcheck-required

• autoscaling-launchconfig-requires-imdsv2

• autoscaling-launch-config-hop-limit

• autoscaling-launch-config-public-ip-disabled

• Templat Peluncuran Penskalaan Otomatis

• penskalaan otomatis-ganda-az

• autoscaling-multiple-instance-types

• backup-rencana-min-frekuensi-dan-min-retensi-cek

• backup-recovery-point-dienkripsi

• backup-recovery-point-manual-deletion-dinonaktifkan

• pencadangan-pemulihan-titik-minimum-retensi-cek

• batch-compute-environment-enabled

• batch-compute-environment-managed

• batch-compute-environment-tagged

• batch-job-antrean-diaktifkan

• antrian pekerjaan batch ditandai

• templat peluncuran-komputasi-komputasi yang dikelola batch

• batch-managed-compute-env-allocation-strategy-check

• batch-managed-compute-env-compute-resources-tagged

• batch-managed-spot-compute-environment-max-bid

• batch-scheduling-policy-tagged

• beanstalk-enhanced-health-reporting-enabled

• bedrockagentcore-gateway-authorizer-enabled

• bedrockagentcore-runtime-private-network-diperlukan

• batuan-agen-memori-enkripsi-diaktifkan

• cassandra-keyspace-tagged

• clb-desync-mode-cek

• clb-ganda-az

• cloudformation-stack-drift-detection-check

• cloudformation-stack-notification-check

• cloudformation-stack-service-role-check

• cloudformation-termination-protection-check

• cloudtrail-semua-baca-s3-data-event-check

• cloudtrail-all-write-s3-data-event-check

• cloudtrail-acara-data-toko-multi-wilayah

• cloudtrail-s3-bucket-akses-logging

• cloudtrail-s3-bucket-publik-akses-dilarang

• cloudtrail-s3-dataevents-diaktifkan

• cloudtrail-security-trail-enabled

• cloudwatch-alarm-tindakan-cek

• cloudwatch-alarm-tindakan-diaktifkan-pemeriksaan

• cloudwatch-alarm-deskripsi

• cloudwatch-alarm-pemeriksaan sumber daya

• cloudwatch-alarm-setting-check

• cloudwatch-log-group-dienkripsi

• cloudwatch-metric-stream-tagged

• cloud-trail-cloud-watch-logs-diaktifkan

• cloud-trail-diaktifkan

• cloud-trail-enkripsi diaktifkan

• cloud-trail-log-file-validation-diaktifkan

• cmk-backing-kunci-rotasi diaktifkan

• codeartifact-repository-tagged

• codebuild-project-artifact-enkripsi

• codebuild-project-environment-privileged-check

• codebuild-project-envvar-awscred-check

• codebuild-project-logging-diaktifkan

• codebuild-project-s3-logs-dienkripsi

• codebuild-project-source-repo-url-check

• codebuild-project-tagged

• codebuild-report-group-encrypted-at-rest

• codebuild-report-group-tagged

• codedeploy-auto-rollback-monitor-enabled

• codedeploy-deployment-group-auto-rollback-enabled

• codedeploy-deployment-group-outdated-instances-update

• codedeploy-ec2-minimum-healthy-hosts-dikonfigurasi

• codedeploy-lambda-allatonce-traffic-shift-disabled

• codeguruprofiler-profiling-group-tagged

• codegurureviewer-repository-association-tagged

• codepipeline-deployment-count-check

• codepipeline-region-fanout-check

• cognito-identity-pool-unauthenticated-logins

• cognito-identity-pool-unauth-access-check

• cognito-userpool-cust-auth-threat-full-check

• cognito-user-pool-advanced-security-enabled

• cognito-user-pool-deletion-protection-enabled

• cognito-user-pool-mfa-diaktifkan

• cognito-user-pool-password-policy-check

• diberi tag cognito-user-pool

• custom-eventbus-policy-attached

• custom-schema-registry-policy-attached

• cw-loggroup-retensi-periode-check

• datasync-location-object-storage-menggunakan-https

• datasync-task-data-verifikasi-diaktifkan

• datasync-task-logging-diaktifkan

• dengan tag tugas inkron data

• dax-enkripsi diaktifkan

• enkripsi titik akhir dax-tls-

• db-instance-backup diaktifkan

• keinginan-instance-tenancy

• tipe instans yang diinginkan

• dms-auto-minor-versi-upgrade-check

• dms-endpoint-ssl-dikonfigurasi

• dms-titik akhir ditandai

• dms-mongo-db-otentikasi diaktifkan

• dms-neptune-iam-otorisasi diaktifkan

• dms-redis-tls-diaktifkan

• dms-replikasi-instance-multi-az-diaktifkan

• dms-replikasi-tidak-publik

• dms-replikasi-tugas-sumber-logging

• dms-replikasi-task-tagged

• dms-replikasi-tugas-targetdb-logging

• docdb-cluster-audit-logging-diaktifkan

• docdb-cluster-backup-retensi-cek

• docdb-cluster-deletion-protection-enabled

• docdb-cluster-dienkripsi

• docdb-cluster-terenkripsi-dalam-transit

• docdb-cluster-snapshot-publik-dilarang

• dynamodb-autoscaling-diaktifkan

• dinamodb-in-backup-plan

• dynamodb-last-backup-recovery-point-created

• dynamodb-meets-restore-time-target

• dynamodb-pitr-diaktifkan

• dynamodb-sumber daya-dilindungi oleh rencana cadangan

• dynamodb-table-deletion-protection-enabled

• dynamodb-table-terenkripsi-kms

• dynamodb-table-enkripsi-diaktifkan

• dynamodb-throughput-limit-check

• ebs-in-backup-plan

• ebs-last-backup-recovery-point-created

• ebs-bertemu-pulih-waktu-target

• contoh yang dioptimalkan ebs

• ebs-sumber daya-dalam-logis-udara-gapped-vault

• ebs-sumber daya-dilindungi oleh rencana cadangan

• ebs-snapshot-blok-akses publik

• ebs-snapshot-public-restorable check

• ec2-capacity-reservation-tagged

• diberi tag ec2-carrier-gateway

• ec2-client-vpn-koneksi-log-diaktifkan

• ec2-client-vpn-endpoint-tagged

• ec2-client-vpn-tidak-otorisasi-semua

• ec2-dhcp-options-tagged

• ec2-ebs-enkripsi-secara default

• ec2-enis-source-destination-check-diaktifkan

• ec2-fleet-tag

• ec2-imdsv2-periksa

• ec2-instance-detailed-monitoring-enabled

• ec2-instance-launched-dengan-allowed-ami

• ec2-instance-dikelola oleh ssm

• ec2-instance-multiple-eni-check

• ec2-instance-tidak-publik-ip

• ec2-instance-profile-terlampir

• dengan tag ec2-ipamscope

• ec2-last-backup-recovery-point-dibuat

• ec2-launchtemplate-ebs-dienkripsi

• ec2-launch-templates-ebs-volume-terenkripsi

• ec2-launch-template-imdsv2-cek

• ec2-launch-template-public-ip-disabled

• ec2-launch-template-tagged

• ec2-managedinstance-aplikasi-daftar hitam

• ec2-managedinstance-aplikasi-diperlukan

• ec2-managedinstance-association-compliance-status-check

• ec2-managedinstance-inventaris-daftar hitam

• ec2-managedinstance-patch-compliance-status-check

• ec2-managedinstance-platform-check

• ec2-bertemu-pulih-waktu-target

• ec2-network-insights-access-scope-analysis-tagged

• ec2-network-insights-access-scope-tagged

• ec2-network-insights-analysis-tagged

• ec2-network-insights-path-tagged

• ec2-no-amazon-kunci-pasangan

• ec2-prefix-list-tagged

• ec2-sumber daya-dalam-logis-udara-gapped-vault

• ec2-sumber daya-dilindungi oleh rencana cadangan

• ec2-security-group-dilampirkan ke eni

• ec2-security-group-dilampirkan-untuk-eni-periodik

• ec2-spot-fleet-request-ct-enkripsi-di-istirahat

• ec2-stopped-instance

• ec2-token-hop-limit-check

• ec2-trafic-mirror-filter-deskripsi

• ec2-traffic-mirror-filter-tagged

• ec2-lalu lintas-cermin-sesi-deskripsi

• ec2-lalu lintas-cermin-sesi ditandai

• ec2-lalu lintas-cermin-target-deskripsi

• ec2-trafic-mirror-target-tagged

• ec2-transit-gateway-auto-vpc-attach-disabled

• ec2-transit-gateway-multicast-domain-ditandai

• ec2-volume-inuse-check

• ec2-vpn-koneksi-ike-versi-periksa

• ec2-vpn-koneksi-loging-diaktifkan

• ec2-vpn-koneksi ditandai

• ecr-private-image-scanning-enabled

• ecr-private-lifecycle-policy-dikonfigurasi

• ecr-private-tag-immutability-enabled

• ecr-repository-cmk-enkripsi diaktifkan

• ecr-repository-tagged

• ecs-awsvpc-networking-diaktifkan

• ecs-capacity-provider-tagged

• ecs-kapasitas-penyedia-terminasi-cek

• ecs-wadah-tidak memiliki hak istimewa

• ecs-containers-readonly-access

• ecs-container-insights-enabled

• ecs-fargate-versi platform-terbaru

• ecs-no-lingkungan-rahasia

• ecs-service-propagate-tags-enabled

• ecs-task-definition-efs-enkripsi-diaktifkan

• ecs-task-definition-linux-pengguna-non-root

• ecs-task-definition-log-konfigurasi

• ecs-task-definition-memory-hard-limit

• ecs-task-definition-network-mode-bukan-host

• ecs-task-definition-nonroot-user

• ecs-task-definition-pid-mode-check

• ecs-task-definition-pengguna-untuk-host-mode-check

• ecs-task-definition-windows-pengguna-non-admin

• efs-access-point-enforce-root-directory

• efs-access-point-enforce-user-identity

• efs-automatic-backup diaktifkan

• efs-terenkripsi cek

• efs-filesystem-ct-dienkripsi

• efs-file-system-ditandai

• rencana efs-in-backup

• efs-last-backup-recovery-point-created

• efs-meets-restore-time-target

• efs-mount-target-public-accessible

• efs-sumber daya-dalam-logis-udara-gapped-vault

• efs-sumber daya-dilindungi oleh rencana cadangan

• terlampir eip

• eks-addon dengan tag

• eks-cluster-logging-diaktifkan

• eks-cluster-log-diaktifkan

• eks-cluster-versi tertua yang didukung

• eks-cluster-rahasia-dienkripsi

• eks-cluster-versi yang didukung

• eks-endpoint-tidak-akses publik

• eks-fargate-profile-tagged

• eks-nodegroup-didukung-versi-cek

• eks-rahasia-dienkripsi

• elasticache-automatic-backup-check-diaktifkan

• elasticache-auto-minor-version-upgrade-check

• elasticache-rbac-auth-enabled

• elasticache-redis-cluster-automatic-backup-check

• elasticache-repl-grp-auto-failover-enabled

• elasticache-repl-grp-terenkripsi-di-istirahat

• elasticache-repl-grp-terenkripsi-dalam-transit

• elasticache-repl-grp-redis-auth-enabled

• elasticache-subnet-group-check

• versi mesin yang didukung elasticache-

• elasticbeanstalk-aplikasi-deskripsi

• elasticbeanstalk-aplikasi-versi-deskripsi

• elasticbeanstalk-lingkungan-deskripsi

• elasticsearch-encrypted-at-rest

• elasticsearch-in-vpc-only

• elasticsearch-logs-to-cloudwatch

• elasticsearch-node-to-node-enkripsi-check

• elastis-beanstalk-log-ke-cloudwatch

• elastis-beanstalk-managed-updates-enabled

• elbv2-acm-sertifikat-diperlukan

• elbv2-pendengar-enkripsi-dalam-transit

• elbv2-multiple-az

• elbv2-kebijakan keamanan-ssl-check yang telah ditentukan sebelumnya

• elbv2-targetgroup-healthcheck-protocol-dienkripsi

• elbv2-targetgroup-protocol-dienkripsi

• elb-acm-sertifikat-diperlukan

• elb-cross-zone-load-balancing-diaktifkan

• elb-kustom-keamanan-kebijakan-ssl-check

• elb-deletion-proteksi-diaktifkan

• elb-internal-skema-cek

• elb-loging-diaktifkan

• elb-predefined-security-policy-ssl-check

• dengan tag elb

• elb-tls-https-pendengar saja

• emr-blok-akses publik

• emr-kerberos-diaktifkan

• emr-master-tidak-ip publik

• emr-keamanan-konfigurasi-enkripsi-istirahat

• emr-keamanan-konfigurasi-enkripsi-transit

• volume terenkripsi

• eventschemas-discoverer-tagged

• eventschemas-registry-tagged

• event-data-store-cmk-enkripsi diaktifkan

• jelas-peluncuran-deskripsi

• jelas-lunch-tagged

• jelas-proyek-deskripsi

• jelas-proyek ditandai

• jelas-segmen-deskripsi

• terbukti-segment-tagged

• fis-experiment-template-log-configuration-exists

• fis-eksperimen-template-tagged

• fms-shield-resource-policy-check

• fms-webacl-resource-policy-check

• fms-webacl-rulegroup-asosiasi-periksa

• pendetektor-entitas-tipe-tagged

• pendetektor penipu dengan label

• pendeteksi penipu dengan tag hasil

• pendetektor penipuan-variabel-tagged

• fsx-last-backup-recovery-point-created

• fsx-lustre-copy-tag-untuk-backup

• fsx-bertemu-pulih-waktu-target

• fsx-ontap-deployment-type-check

• fsx-openzfs-copy-tag-diaktifkan

• fsx-openzfs-deployment-type-check

• fsx-sumber daya-dilindungi oleh rencana cadangan

• fsx-windows-audit-log-dikonfigurasi

• fsx-windows-deployment-type-check

• glb-listener-tagged

• glb diberi tag

• global-endpoint-event-replikasi-diaktifkan

• lem-pekerjaan-logging-diaktifkan

• lem-ml-transform-terenkripsi-di-istirahat

• lem-ml-transform-tagged

• lem-percikan pekerjaan-versi yang didukung

• groundstation-config-tagged

• groundstation-dataflowendpointgroup ditandai

• groundstation-missionprofile-tagged

• guardduty-ec2-protection-runtime-enabled

• guardduty-ecs-protection-runtime-enabled

• guardduty-eks-protection-audit-enabled

• guardduty-eks-protection-runtime-enabled

• perwalian diaktifkan-terpusat

• guardduty-lambda-protection-enabled

• guardduty-malware-protection-enabled

• temuan-non-arsip-temuan-penjagaan

• guardduty-rds-protection-enabled

• guardduty-runtime-monitoring-enabled

• guardduty-s3-protection-enabled

• healthlake-fhirdatastore-tagged

• iam-customer-policy-blocked-kms-actions

• iam-eksternal-access-analyzer-enabled

• iam-group-memiliki-pengguna-periksa

• iam-inline-policy-blocked-kms-actions

• iam-no-inline-policy-check

• iam-password-policy

• iam-policy-blacklist-check

• deskripsi kebijakan iam

• iam-kebijakan yang digunakan

• iam-policy-no-statements-with-admin-access

• iam-kebijakan-tidak-pernyataan-dengan-akses penuh

• iam-role-managed-policy-check

• iam-root-akses-kunci-cek

• iam-user-group-membership-check

• iam-user-mfa-diaktifkan

• iam-user-no-policies-check

• iam-user-unused-credentials-check

• imagebuilder-distributionconfiguration-tagged

• tagged imagebuilder-imagepipeline

• imagebuilder-imagerecipe-ebs-volumes-dienkripsi

• imagebuilder-imagerecipe-tagged

• imagebuilder-infrastructureconfiguration-tagged

• masuk-ssh-dinonaktifkan

• inspector-ec2-scan-enabled

• inspector-ecr-scan-enabled

• inspector-lambda-code-scan-enabled

• inspector-lambda-standard-scan-enabled

• contoh-dalam-vpc

• internet-gateway-diotorisasi-vpc saja

• iotdevicedefender-custom-metric-tagged

• iotevents-alarm-model-tagged

• iotevents-detector-model-tagged

• iotevents-input-tagged

• iotsitewise-aset-model-tagged

• iotsitewise-dashboard-tagged

• dengan tag iotsitewise-gateway

• iotsitewise-portal-tagged

• iotsitewise-project-tagged

• iot-authorizer-token-signing-enabled

• iot-job-template-tag

• iot-provisioning-template-description

• iot-penyediaan-template-jitp

• iot-provisioning-template-tagged

• diberi tag audit berjadwal iot

• kendra-index-tagged

• kinesisvideo-signalingchannel-tagged

• kinesisvideo-stream-tagged

• kinesis-firehose-delivery-stream-dienkripsi

• kinesis-stream-backup-retensi-cek

• kinesis-stream-terenkripsi

• kinesis-video-aliran-minimum-retensi data

• kms-cmk-tidak-menjadwalkan-untuk-penghapusan

• kms-kunci-kebijakan-tidak-akses publik

• kms-key-tagged

• lambda-concurrency-check

• lambda-dlq cek

• lambda-fungsi-aplikasi-log-level-check

• deskripsi fungsi lambda

• lambda-fungsi-log-format-json

• lambda-fungsi-publik-akses-dilarang

• lambda-fungsi-pengaturan-cek

• lambda-fungsi-sistem-log-pemeriksaan-tingkat

• lambda-fungsi-xray diaktifkan

• lambda-dalam-vpc

• lambda-vpc-multi-az-cek

• lightsail-bucket-allow-public-overrides-disabled

• lightsail-bucket-object-versioning-enabled

• lightsail-bucket-tagged

• lightsail-certificate-tagged

• dengan tag lightsail-disk

• macie-auto-sensitif-data-penemuan-cek

• macie-status-check

• mariadb-menerbitkan-log-ke-cloudwatch-log

• mediapackage-packagingconfiguration-tagged

• mediatailor-playbackconfiguration-tagged

• memorydb-subnetgroup dengan tag

• mfa-diaktifkan-untuk-iam-konsol-akses

• mq-active-broker-ldap-otentikasi

• modus penerapan mq-aktif

• mq-active-single-instance-broker-penyimpanan-tipe-efs

• mq-automatic-minor-version-upgrade-enabled

• mq-auto-minor-version-upgrade-enabled

• mq-broker-umum-loging-diaktifkan

• mq-cloudwatch-audit-logging-diaktifkan

• mq-cloudwatch-audit-log-diaktifkan

• mq-tidak-akses publik

• modus penyebaran mq-kelinci

• msk-cluster-publik-akses-dinonaktifkan

• msk-cluster dengan tag

• msk-connect-connector-logging-enabled

• msk-enhanced-monitoring-enabled

• msk-in-cluster-node-require-tls

• msk-unrestricted-access-check

• multi-wilayah-cloud-trail-diaktifkan

• nacl-no-unrestricted-ssh-rdp

• neptunus-cluster-cadangan-retensi-cek

• neptune-cluster-cloudwatch-log-ekspor diaktifkan

• neptune-cluster-copy-tag-ke-snapshot diaktifkan

• neptunus-cluster-deletion-protection-enabled

• neptune-cluster-terenkripsi

• neptune-cluster-iam-database-otentikasi

• neptune-cluster-multi-az-diaktifkan

• neptune-cluster-snapshot-dienkripsi

• neptune-cluster-snapshot-iam-database-auth-enabled

• neptune-cluster-snapshot-publik-dilarang

• netfw-deletion-protection-enabled

• netfw-logging-diaktifkan

• netfw-multi-az-diaktifkan

• paket netfw-policy-default-tindakan-fragmen

• netfw-policy-default-tindakan-paket penuh

• netfw-kebijakan-aturan-kelompok-terkait

• netfw-stateless-rule-group-tidak-kosong

• netfw-subnet-change-protection-enabled

• nlb-cross-zone-load-balancing-enabled

• nlb-internal-skema-cek

• nlb-listener-tagged

• nlb-logging-diaktifkan

• nlb diberi tag

• tanpa batasan-rute-ke-igw

• opensearchserverless-koleksi-deskripsi

• opensearchserverless-collection-standbyreplicas-enabled

• opensearch-access-control-enabled

• opensearch-audit-logging-enabled

• opensearch-data-node-toleransi kesalahan

• opensearch-terenkripsi-di-istirahat

• opensearch-https-diperlukan

• opensearch-in-vpc-only

• opensearch-logs-to-cloudwatch

• opensearch-node-to-node-enkripsi-cek

• opensearch-primery-node-fault-toleransi

• opensearch-update-check

• kelinci-mq-versi yang didukung

• rds-aurora-mysql-audit-logging-diaktifkan

• rds-aurora-postgresql-logs-to-cloudwatch

• rds-automatic-minor-version-upgrade-enabled

• rds-cluster-auto-minor-version-upgrade-enable

• rds-cluster-cadangan-retensi-periksa

• rds-cluster-default-admin-check

• rds-cluster-deletion-protection-enabled

• rds-cluster-terenkripsi-di-istirahat

• rds-cluster-iam-otentikasi-diaktifkan

• rds-cluster-multi-az-diaktifkan

• rds-enhanced-monitoring-enabled

• rds-event-subscription-tagged

• rds-global-cluster-aurora-mysql-versi yang didukung

• rds-instance-default-admin-check

• rds-instance-deletion-protection-enabled

• rds-instance-iam-otentikasi diaktifkan

• rds-instance-public-access-check

• rds-instance-subnet-igw-check

• rds-dalam-rencana cadangan

• rds-last-backup-recovery-point-dibuat

• rds-logging-diaktifkan

• rds-mariadb-instance-terenkripsi-dalam-transit

• rds-meets-restore-time-target

• dukungan rds-multi-az-

• rds-mysql-cluster-copy-tag-untuk-pemeriksaan snapshot

• rds-mysql-instance-terenkripsi-dalam-transit

• rds-option-group-tagged

• rds-pgsql-cluster-copy-tag-untuk-snapshot-check

• rds-postgresql-logs-ke-cloudwatch

• rds-postgres-instance-terenkripsi-dalam-transit

• rds-proxy-tls-enkripsi

• rds-sumber daya-dilindungi oleh rencana cadangan

• rds-snapshots-publik-dilarang

• rds-snapshot-dienkripsi

• rds-sqlserver-terenkripsi-dalam-transit

• rds-sql-server-log-ke-cloudwatch

• rds-penyimpanan-terenkripsi

• redshift-audit-logging-diaktifkan

• redshift-backup diaktifkan

• redshift-cluster-configuration-check

• redshift-cluster-kms-diaktifkan

• redshift-cluster-maintenance settings-check

• redshift-cluster-multi-az-diaktifkan

• redshift-cluster-parameter-group-tagged

• redshift-cluster-public-access-check

• redshift-cluster-subnet-grup-multi-az

• redshift-default-admin-check

• redshift-default-db-name-check

• redshift-enhanced-vpc-routing-enabled

• redshift-require-tls-ssl

• redshift-serverless-default-admin-check

• redshift-serverless-default-db-name-check

• redshift-serverless-namespace-cmk-enkripsi

• redshift-serverless-publish-logs-to-cloudwatch

• redshift-serverless-workgroup-terenkripsi-dalam-transit

• redshift-serverless-workgroup-no-public-access

• redshift-serverless-workgroup-route-dalam-vpc

• redshift-unrestricted-port-access

• tag yang dibutuhkan

• resiliencehub-app-tagged

• resiliencehub-resiliencypolicy-tagged

• lalu lintas masuk terbatas

• akun-akun-perangkat keras-mfa-diaktifkan

• akun-akun-mfa-diaktifkan

• route53-resolver-firewall-domain-list-tagged

• route53-resolver-firewall-rule-group-association-tagged

• route53-resolver-firewall-rule-group-tagged

• route53-resolver-resolver-endpoint ditandai

• route53-resolver-resolver-rule-tagged

• rum-app-monitor-cloudwatch-logs-diaktifkan

• dengan tag rum-app-monitor-

• s3express-dir-bucket-lifecycle-aturan-check

• s3-access-point-in-vpc-only

• s3-access-point-publik-akses-blok

• s3-akun-tingkat-akses-publik-blok

• s3-akun-tingkat-akses-publik-blok-periodik

• s3-ember-acl-dilarang

• s3-ember-blacklist-tindakan-dilarang

• s3-bucket-lintas-wilayah-replikasi-diaktifkan

• s3-bucket-default-lock-enabled

• s3-ember-tingkat-akses-publik-dilarang

• s3-bucket-loging-diaktifkan

• s3-bucket-mfa-delete-enabled

• s3-bucket-policy-grantee-check

• s3-bucket-policy-tidak-lebih-permisif

• s3-ember-publik-baca-dilarang

• s3-ember-publik-tulis-dilarang

• s3-bucket-replikasi-diaktifkan

• s3-bucket-server-side-enkripsi diaktifkan

• s3-bucket-ssl-permintaan-saja

• s3-ember dengan tag

• s3-bucket-versioning-diaktifkan

• s3-default-enkripsi-kms

• s3-direktori-bucket-lifecycle-policy-aturan-check

• s3-acara-notifikasi-diaktifkan

• s3-last-backup-recovery-point-made

• s3-lifecycle-policy-check

• s3-bertemu-pulih-waktu-target

• s3-sumber daya-dalam-logis-udara-gapped-vault

• s3-sumber daya-dilindungi oleh rencana cadangan

• s3-versi-lifecycle-policy-check

• sagemaker-app-image-config-tagged

• sagemaker-data-kualitas-pekerjaan-terenkripsi-dalam-transit

• sagemaker-data-kualitas-pekerjaan-isolasi

• pembuat sagemer-domain-di-vpc

• dengan tag domain pembuat sagemer

• sagemaker-endpoint-konfigurasi-kms-kunci-dikonfigurasi

• sagemaker-endpoint-config-prod-instance-count

• sagemaker-featuregroup-deskripsi

• sagemaker-featuregroup-enkripsi-di-istirahat

• sagemaker-featuregroup-online-store-enkripsi

• sagemaker-fitur-grup-tagged

• sagemaker-gambar-deskripsi

• sagemaker-image-tagged

• sagemaker-inferenceexperiment-tagged

• sagemaker-model-bias-pekerjaan-enkripsi-dalam-transit

• pembuat sagemer-model-bias-pekerjaan-isolasi

• sagemaker-model-menjelaskan-pekerjaan-enkripsi-dalam-transit

• pembuat sagemer-model-di-vpc

• sagemaker-model-isolasi-diaktifkan

• sagemaker-model-multicontainer-private-registry

• sagemaker-model-private-registry-diperlukan

• sagemaker-model-kualitas-pekerjaan-enkripsi-dalam-transit

• sagemaker-monitoring-jadwal-isolasi

• sagemaker-notebook-instance-dalam-vpc

• sagemaker-notebook-instance-kms-kunci-dikonfigurasi

• sagemaker-notebook-instance-platform-versi

• sagemaker-notebook-instance-root-access-check

• sagemaker-notebook-tidak-akses internet-langsung

• secretsmanager-rotation-enabled-check

• secretsmanager-schedduled-rotation-success-check

• secretsmanager-rahasia-periodik rotasi

• secretsmanager-rahasia-tidak digunakan

• secretsmanager-menggunakan-cmk

• Securityhub diaktifkan

• keamanan-akun-informasi-disediakan

• layanan-katalog-portfolio-tagged

• layanan-katalog-dibagi-dalam-organisasi

• layanan-vpc-endpoint-enabled

• ses-pengiriman-tls-diperlukan

• tanda-signingprofile-tagged

• sns-terenkripsi-kms

• sns-topic-message-delivery-notification-enabled

• sns-topik-tidak-akses publik

• sqs-antrian-dlq-cek

• sqs-antrian-tidak-akses publik

• sqs-antrean-kebijakan-pemeriksaan akses penuh

• ssm-automation-blok-berbagi publik

• ssm-otomasi-logging-diaktifkan

• ssm-dokumen-tidak-publik

• ssm-document-tagged

• stepfunctions-state-machine-tagged

• fungsi-langkah-state-mesin-logging-diaktifkan

• storagegateway-last-backup-recovery-point-created

• storagegateway-sumber daya-dalam-logis-udara-gapped-vault

• storagegateway-sumber daya-dilindungi oleh rencana cadangan

• subnet-auto-assign-public-ip-disabled

• transfer-perjanjian-deskripsi

• transfer-agreement-tagged

• transfer-sertifikat-deskripsi

• transfer-sertifikat-ditandai

• transfer-konektor-as2-enkripsi-algoritme-periksa

• transfer-konektor-as2-mdn-penandatanganan-algoritma-periksa

• transfer-konektor-sebagai-penandatanganan-algoritma-periksa

• transfer-konektor-logging-diaktifkan

• transfer-connector-tagged

• transfer-keluarga-server-no-ftp

• transfer-profile-tagged

• transfer-alur kerja-deskripsi

• transfer-workflow-tagged

• virtualmachine-last-backup-recovery-point-created

• virtualmachine-sumber daya-dalam-logis-udara-gapped-vault

• virtualmachine-sumber daya-dilindungi-dengan-rencana cadangan

• vpc-default-security-group-closed

• vpc-endpoint-diaktifkan

• vpc-flow-logs-diaktifkan

• vpc-network-acl-unused-check

• vpc-peering-dns-resolusi-cek

• vpc-sg-port terbuka saja-untuk-resmi

• pemeriksaan pembatasan vpc-sg-port-port

• vpc-vpn-2-terowongan

• wafv2-logging-diaktifkan

• wafv2-rulegroup-logging-diaktifkan

• wafv2-rulegroup-tidak-kosong

• wafv2-webacl-tidak-kosong

• waf-regional-rulegroup-tidak-kosong

• waf-regional-aturan-tidak-kosong

• waf-regional-webacl-tidak-kosong

• akses-kunci-diputar

• akun-bagian-organisasi

• acmpca-sertifikat-otoritas-tagged

• acm-sertifikat-kadaluarsa-cek

• acm-sertifikat-rsa-cek

• acm-sertifikat-transparan-loging-diaktifkan

• acm-pca-root-ca-dinonaktifkan

• aktif-mq-versi yang didukung

• alb-desync-mode-cek

• alb-http-drop-invalid-header-enabled

• pemeriksaan pengalihan alb-http-ke-https-

• alb-internal-skema-cek

• alb-listener-tagged

• dengan tag alb

• alb-waf-diaktifkan

• amplify-app-branch-auto-deletion-enabled

• amplify-app-build-spec-dikonfigurasi

• amplify-app-deskripsi

• amplify-app-no-variabel lingkungan

• amplify-app-platform-check

• amplify-app dengan tag

• amplify-branch-auto-build-enabled

• amplify-branch-build-spec-dikonfigurasi

• amplify-cabang-deskripsi

• amplify-branch-framework-dikonfigurasi

• amplify-branch-performance-mode-enabled

• amplify-branch-pull-request-preview-enabled

• amplify-branch-tagged

• apigatewayv2-integrasi-pribadi-https-diaktifkan

• apigatewayv2-tahap-deskripsi

• apigateway-domain-nama-tls-check

• apigateway-stage-access-logs-enabled

• apigateway-tahap-deskripsi

• api-gwv2-access-logs-enabled

• api-gwv2-otorisasi-tipe-dikonfigurasi

• api-gwv2-tahap-default-route-detailed-metrics-enabled

• api-gw-terkait-dengan-waf

• api-gw-cache-diaktifkan-dan-dienkripsi

• api-gw-endpoint-type-check

• api-gw-eksekusi-loging-diaktifkan

• dengan tag api-gw-rest-api

• api-gw-ssl-diaktifkan

• dengan tag api-gw-stage

• api-gw-xray diaktifkan

• appconfig-aplikasi-deskripsi

• appconfig-application-tagged

• appconfig-configuration-profile-tagged

• appconfig-configuration-profile-validators-tidak-kosong

• appconfig-deployment-strategy-description

• appconfig-deployment-strategy-minimum-final-bake-time

• appconfig-deployment-strategy-replicate-to-ssm

• appconfig-deployment-strategy-tagged

• appconfig-lingkungan-deskripsi

• appconfig-environment-tagged

• dengan tag appconfig-extension-association

• appconfig-freeform-profile-config-storage

• appconfig-hosted-configuration-version-description

• dengan tag appflow-flow-

• appflow-flow-trigger-type-check

• appintegrations-application-approved-origins-check

• appintegrations-aplikasi-tagged

• appintegrations-event-integration-description

• appintegrations-event-integration-tagged

• appmesh-gateway-route-tagged

• appmesh-mesh-deny-tcp-forwarding

• appmesh-mesh-ip-pref-check

• dengan tag appmesh-mesh

• dengan tag rute appmesh

• appmesh-virtual-gateway-backend-defaults-tls

• appmesh-virtual-gateway-listeners-health-check-enabled

• appmesh-virtual-gateway-logging-file-path-ada

• dengan tag appmesh-virtual-gateway

• appmesh-virtual-node-backend-defaults-tls-on

• appmesh-virtual-node-cloud-map-ip-pref-check

• appmesh-virtual-node-dns-ip-pref-check

• appmesh-virtual-node-listeners-health-check-enabled

• appmesh-virtual-node-listeners-outlier-detect-enabled

• appmesh-virtual-node-logging-file-path-ada

• appmesh-virtual-node-service-backends-tls-diberlakukan

• appmesh-virtual-node-tagged

• appmesh-virtual-router ditandai

• appmesh-virtual-service-tagged

• disetujui-amis-oleh-id

• disetujui-amis-demi-tag

• apprunner-layanan-di-vpc

• apprunner-service-ip-alamat-tipe-check

• apprunner-service-max-unhealthy-threshold

• apprunner-layanan-tidak-akses publik

• apprunner-service-observability-enabled

• apprunner-service-tagged

• apprunner-vpc-connector-tagged

• appstream-armada-dalam-vpc

• appsync-terkait-dengan-waf

• appsync-otorisasi-periksa

• appsync-cache-ct-enkripsi-di-istirahat

• appsync-cache-ct-enkripsi-dalam-transit

• appsync-cache-enkripsi-di-istirahat

• appsync-graphql-api-xray diaktifkan

• appsync-logging-diaktifkan

• aps-rule-groups-namespace-tagged

• athena-data-katalog-deskripsi

• athena-persiapan-pernyataan-deskripsi

• athena-workgroup-deskripsi

• athena-workgroup-terenkripsi-di-istirahat

• athena-workgroup-enforce-workgroup-konfigurasi

• athena-workgroup-engine-versi-auto-upgrade

• athena-workgroup-logging-enabled

• auditmanager-assesment-tagged

• aurora-global-database-enkripsi-di-istirahat

• aurora-last-backup-recovery-point-created

• aurora-bertemu-pulih-waktu-target

• aurora-mysql-backtracking-diaktifkan

• aurora-mysql-cluster-audit-logging

• aurora-sumber daya-dalam-logis-udara-gapped-vault

• aurora-sumber daya-dilindungi oleh rencana cadangan

• penyeimbangan kembali kapasitas-penskalaan otomatis

• autoscaling-group-elb-healthcheck-required

• autoscaling-launchconfig-requires-imdsv2

• autoscaling-launch-config-hop-limit

• autoscaling-launch-config-public-ip-disabled

• Templat Peluncuran Penskalaan Otomatis

• penskalaan otomatis-ganda-az

• autoscaling-multiple-instance-types

• backup-rencana-min-frekuensi-dan-min-retensi-cek

• backup-recovery-point-dienkripsi

• backup-recovery-point-manual-deletion-dinonaktifkan

• pencadangan-pemulihan-titik-minimum-retensi-cek

• batch-compute-environment-enabled

• batch-compute-environment-managed

• batch-compute-environment-tagged

• batch-job-antrean-diaktifkan

• antrian pekerjaan batch ditandai

• templat peluncuran-komputasi-komputasi yang dikelola batch

• batch-managed-compute-env-allocation-strategy-check

• batch-managed-compute-env-compute-resources-tagged

• batch-managed-spot-compute-environment-max-bid

• batch-scheduling-policy-tagged

• beanstalk-enhanced-health-reporting-enabled

• bedrockagentcore-gateway-authorizer-enabled

• bedrockagentcore-runtime-private-network-diperlukan

• batuan-agen-memori-enkripsi-diaktifkan

• cassandra-keyspace-tagged

• clb-desync-mode-cek

• clb-ganda-az

• cloudformation-stack-drift-detection-check

• cloudformation-stack-notification-check

• cloudformation-stack-service-role-check

• cloudformation-termination-protection-check

• cloudfront-accesslogs-enabled

• cloudfront-terkait-dengan-waf

• cloudfront-custom-ssl-sertifikat

• cloudfront-default-root-object-dikonfigurasi

• cloudfront-distribusi-kunci-grup-diaktifkan

• cloudfront-no-deprecated-ssl-protokol

• cloudfront-origin-access-identity-enabled

• cloudfront-origin-failover-enabled

• cloudfront-origin-lambda-url-oac-diaktifkan

• cloudfront-s3-origin-access-control-enabled

• cloudfront-s3-origin-non-existent-bucket

• cloudfront-security-policy-check

• cloudfront-sni-diaktifkan

• cloudfront-ssl-pemeriksaan kebijakan

• cloudfront-traffic-to-origin-enkripsi

• cloudfront-viewer-policy-https

• cloudtrail-semua-baca-s3-data-event-check

• cloudtrail-all-write-s3-data-event-check

• cloudtrail-acara-data-toko-multi-wilayah

• cloudtrail-s3-bucket-akses-logging

• cloudtrail-s3-bucket-publik-akses-dilarang

• cloudtrail-s3-dataevents-diaktifkan

• cloudtrail-security-trail-enabled

• cloudwatch-alarm-tindakan-cek

• cloudwatch-alarm-tindakan-diaktifkan-pemeriksaan

• cloudwatch-alarm-deskripsi

• cloudwatch-alarm-pemeriksaan sumber daya

• cloudwatch-alarm-setting-check

• cloudwatch-log-group-dienkripsi

• cloudwatch-metric-stream-tagged

• cloud-trail-cloud-watch-logs-diaktifkan

• cloud-trail-diaktifkan

• cloud-trail-enkripsi diaktifkan

• cloud-trail-log-file-validation-diaktifkan

• cmk-backing-kunci-rotasi diaktifkan

• codeartifact-repository-tagged

• codebuild-project-artifact-enkripsi

• codebuild-project-environment-privileged-check

• codebuild-project-envvar-awscred-check

• codebuild-project-logging-diaktifkan

• codebuild-project-s3-logs-dienkripsi

• codebuild-project-source-repo-url-check

• codebuild-project-tagged

• codebuild-report-group-encrypted-at-rest

• codebuild-report-group-tagged

• codedeploy-auto-rollback-monitor-enabled

• codedeploy-deployment-group-auto-rollback-enabled

• codedeploy-deployment-group-outdated-instances-update

• codedeploy-ec2-minimum-healthy-hosts-dikonfigurasi

• codedeploy-lambda-allatonce-traffic-shift-disabled

• codeguruprofiler-profiling-group-tagged

• codegurureviewer-repository-association-tagged

• codepipeline-deployment-count-check

• codepipeline-region-fanout-check

• cognito-identity-pool-unauthenticated-logins

• cognito-identity-pool-unauth-access-check

• cognito-userpool-cust-auth-threat-full-check

• cognito-user-pool-advanced-security-enabled

• cognito-user-pool-deletion-protection-enabled

• cognito-user-pool-mfa-diaktifkan

• cognito-user-pool-password-policy-check

• diberi tag cognito-user-pool

• koneksi-instance-logging-diaktifkan

• customerprofiles-domain-tagged

• customerprofiles-object-type-allow-profile-creation

• customerprofiles-object-type-tagged

• custom-eventbus-policy-attached

• custom-schema-registry-policy-attached

• cw-loggroup-retensi-periode-check

• datasync-location-object-storage-menggunakan-https

• datasync-task-data-verifikasi-diaktifkan

• datasync-task-logging-diaktifkan

• dengan tag tugas inkron data

• dax-enkripsi diaktifkan

• enkripsi titik akhir dax-tls-

• db-instance-backup diaktifkan

• keinginan-instance-tenancy

• tipe instans yang diinginkan

• dms-auto-minor-versi-upgrade-check

• dms-endpoint-ssl-dikonfigurasi

• dms-titik akhir ditandai

• dms-mongo-db-otentikasi diaktifkan

• dms-neptune-iam-otorisasi diaktifkan

• dms-redis-tls-diaktifkan

• dms-replikasi-instance-multi-az-diaktifkan

• dms-replikasi-tidak-publik

• dms-replikasi-tugas-sumber-logging

• dms-replikasi-task-tagged

• dms-replikasi-tugas-targetdb-logging

• docdb-cluster-audit-logging-diaktifkan

• docdb-cluster-backup-retensi-cek

• docdb-cluster-deletion-protection-enabled

• docdb-cluster-terenkripsi

• docdb-cluster-terenkripsi-dalam-transit

• docdb-cluster-snapshot-publik-dilarang

• dynamodb-autoscaling-diaktifkan

• dinamodb-dalam-rencana cadangan

• dynamodb-last-backup-recovery-point-created

• dynamodb-meets-restore-time-target

• dynamodb-pitr-diaktifkan

• dynamodb-sumber daya-dilindungi oleh rencana cadangan

• dynamodb-table-deletion-protection-enabled

• dynamodb-table-terenkripsi-kms

• dynamodb-table-enkripsi-diaktifkan

• dynamodb-throughput-limit-check

• ebs-in-backup-plan

• ebs-last-backup-recovery-point-created

• ebs-bertemu-pulih-waktu-target

• contoh yang dioptimalkan ebs

• ebs-sumber daya-dalam-logis-udara-gapped-vault

• ebs-sumber daya-dilindungi oleh rencana cadangan

• ebs-snapshot-blok-akses publik

• ebs-snapshot-public-restorable check

• ec2-capacity-reservation-tagged

• diberi tag ec2-carrier-gateway

• ec2-client-vpn-koneksi-log-diaktifkan

• ec2-client-vpn-endpoint-tagged

• ec2-client-vpn-tidak-otorisasi-semua

• ec2-dhcp-options-tagged

• ec2-ebs-enkripsi-secara default

• ec2-enis-source-destination-check-diaktifkan

• ec2-fleet-tag

• ec2-imdsv2-periksa

• ec2-instance-detailed-monitoring-enabled

• ec2-instance-launched-dengan-allowed-ami

• ec2-instance-dikelola oleh ssm

• ec2-instance-multiple-eni-check

• ec2-instance-tidak-publik-ip

• ec2-instance-profile-terlampir

• dengan tag ec2-ipamscope

• ec2-last-backup-recovery-point-dibuat

• ec2-launchtemplate-ebs-dienkripsi

• ec2-launch-templates-ebs-volume-terenkripsi

• ec2-launch-template-imdsv2-cek

• ec2-launch-template-public-ip-disabled

• ec2-launch-template-tagged

• ec2-managedinstance-aplikasi-daftar hitam

• ec2-managedinstance-aplikasi-diperlukan

• ec2-managedinstance-association-compliance-status-check

• ec2-managedinstance-inventaris-daftar hitam

• ec2-managedinstance-patch-compliance-status-check

• ec2-managedinstance-platform-check

• ec2-bertemu-pulih-waktu-target

• ec2-network-insights-access-scope-analysis-tagged

• ec2-network-insights-access-scope-tagged

• ec2-network-insights-analysis-tagged

• ec2-network-insights-path-tagged

• ec2-no-amazon-kunci-pasangan

• ec2-paravirtual-instance-check

• ec2-prefix-list-tagged

• ec2-sumber daya-dalam-logis-udara-gapped-vault

• ec2-sumber daya-dilindungi oleh rencana cadangan

• ec2-security-group-dilampirkan ke eni

• ec2-security-group-dilampirkan-untuk-eni-periodik

• ec2-spot-fleet-request-ct-enkripsi-di-istirahat

• ec2-stopped-instance

• ec2-token-hop-limit-check

• ec2-trafic-mirror-filter-deskripsi

• ec2-traffic-mirror-filter-tagged

• ec2-lalu lintas-cermin-sesi-deskripsi

• ec2-lalu lintas-cermin-sesi ditandai

• ec2-lalu lintas-cermin-target-deskripsi

• ec2-trafic-mirror-target-tagged

• ec2-transit-gateway-auto-vpc-attach-disabled

• ec2-transit-gateway-multicast-domain-ditandai

• ec2-volume-inuse-check

• ec2-vpn-koneksi-ike-versi-periksa

• ec2-vpn-koneksi-loging-diaktifkan

• ec2-vpn-koneksi ditandai

• ecr-private-image-scanning-enabled

• ecr-private-lifecycle-policy-dikonfigurasi

• ecr-private-tag-immutability-enabled

• ecr-repository-cmk-enkripsi diaktifkan

• ecr-repository-tagged

• ecs-awsvpc-networking-diaktifkan

• ecs-capacity-provider-tagged

• ecs-kapasitas-penyedia-terminasi-cek

• ecs-wadah-tidak memiliki hak istimewa

• ecs-containers-readonly-access

• ecs-container-insights-enabled

• ecs-fargate-versi platform-terbaru

• ecs-no-lingkungan-rahasia

• ecs-service-propagate-tags-enabled

• ecs-task-definition-efs-enkripsi-diaktifkan

• ecs-task-definition-linux-pengguna-non-root

• ecs-task-definition-log-konfigurasi

• ecs-task-definition-memory-hard-limit

• ecs-task-definition-network-mode-bukan-host

• ecs-task-definition-nonroot-user

• ecs-task-definition-pid-mode-check

• ecs-task-definition-pengguna-untuk-host-mode-check

• ecs-task-definition-windows-pengguna-non-admin

• efs-access-point-enforce-root-directory

• efs-access-point-enforce-user-identity

• efs-automatic-backup diaktifkan

• efs-terenkripsi cek

• efs-filesystem-ct-dienkripsi

• efs-file-system-ditandai

• rencana efs-in-backup

• efs-last-backup-recovery-point-created

• efs-meets-restore-time-target

• efs-mount-target-public-accessible

• efs-sumber daya-dalam-logis-udara-gapped-vault

• efs-sumber daya-dilindungi oleh rencana cadangan

• terlampir eip

• eks-addon dengan tag

• eks-cluster-logging-diaktifkan

• eks-cluster-log-diaktifkan

• eks-cluster-versi tertua yang didukung

• eks-cluster-rahasia-dienkripsi

• eks-cluster-versi yang didukung

• eks-endpoint-tidak-akses publik

• eks-fargate-profile-tagged

• eks-nodegroup-didukung-versi-cek

• eks-rahasia-dienkripsi

• elasticache-automatic-backup-check-diaktifkan

• elasticache-auto-minor-version-upgrade-check

• elasticache-rbac-auth-enabled

• elasticache-redis-cluster-automatic-backup-check

• elasticache-repl-grp-auto-failover-enabled

• elasticache-repl-grp-terenkripsi-di-istirahat

• elasticache-repl-grp-terenkripsi-dalam-transit

• elasticache-repl-grp-redis-auth-enabled

• elasticache-subnet-group-check

• versi mesin yang didukung elasticache-

• elasticbeanstalk-aplikasi-deskripsi

• elasticbeanstalk-aplikasi-versi-deskripsi

• elasticbeanstalk-lingkungan-deskripsi

• elasticsearch-encrypted-at-rest

• elasticsearch-in-vpc-only

• elasticsearch-logs-to-cloudwatch

• elasticsearch-node-to-node-enkripsi-check

• elastis-beanstalk-log-ke-cloudwatch

• elastis-beanstalk-managed-updates-enabled

• elbv2-acm-sertifikat-diperlukan

• elbv2-pendengar-enkripsi-dalam-transit

• elbv2-multiple-az

• elbv2-kebijakan keamanan-ssl-check yang telah ditentukan sebelumnya

• elbv2-targetgroup-healthcheck-protocol-dienkripsi

• elbv2-targetgroup-protocol-dienkripsi

• elb-acm-sertifikat-diperlukan

• elb-cross-zone-load-balancing-diaktifkan

• elb-kustom-keamanan-kebijakan-ssl-check

• elb-deletion-proteksi-diaktifkan

• elb-internal-skema-cek

• elb-loging-diaktifkan

• elb-predefined-security-policy-ssl-check

• dengan tag elb

• elb-tls-https-pendengar saja

• emr-blok-akses publik

• emr-kerberos-diaktifkan

• emr-master-tidak-ip publik

• emr-keamanan-konfigurasi-enkripsi-istirahat

• emr-keamanan-konfigurasi-enkripsi-transit

• volume terenkripsi

• eventschemas-discoverer-tagged

• eventschemas-registry-tagged

• event-data-store-cmk-enkripsi diaktifkan

• jelas-peluncuran-deskripsi

• jelas-lunch-tagged

• jelas-deskripsi proyek

• jelas-proyek ditandai

• jelas-segmen-deskripsi

• terbukti-segment-tagged

• fis-experiment-template-log-configuration-exists

• fis-eksperimen-template-tagged

• fms-shield-resource-policy-check

• fms-webacl-resource-policy-check

• fms-webacl-rulegroup-asosiasi-periksa

• pendetektor-entitas-tipe-tagged

• pendetektor penipu dengan label

• pendeteksi penipu dengan tag hasil

• pendetektor-variabel-penipu

• fsx-last-backup-recovery-point-created

• fsx-lustre-copy-tag-untuk-backup

• fsx-bertemu-pulih-waktu-target

• fsx-ontap-deployment-type-check

• fsx-openzfs-copy-tag-diaktifkan

• fsx-openzfs-deployment-type-check

• fsx-sumber daya-dilindungi oleh rencana cadangan

• fsx-windows-audit-log-dikonfigurasi

• fsx-windows-deployment-type-check

• glb-listener-tagged

• glb diberi tag

• global-endpoint-event-replikasi-diaktifkan

• lem-pekerjaan-logging-diaktifkan

• lem-ml-transform-terenkripsi-di-istirahat

• lem-ml-transform-tagged

• lem-percikan pekerjaan-versi yang didukung

• groundstation-config-tagged

• groundstation-dataflowendpointgroup ditandai

• groundstation-missionprofile-tagged

• guardduty-ec2-protection-runtime-enabled

• guardduty-ecs-protection-runtime-enabled

• guardduty-eks-protection-audit-enabled

• guardduty-eks-protection-runtime-enabled

• perwalian diaktifkan-terpusat

• guardduty-lambda-protection-enabled

• guardduty-malware-protection-enabled

• temuan-non-arsip-temuan-penjagaan

• guardduty-rds-protection-enabled

• guardduty-runtime-monitoring-enabled

• guardduty-s3-protection-enabled

• healthlake-fhirdatastore-tagged

• iam-customer-policy-blocked-kms-actions

• iam-eksternal-access-analyzer-enabled

• iam-group-memiliki-pengguna-periksa

• iam-inline-policy-blocked-kms-actions

• iam-no-inline-policy-check

• iam-oidc-provider-client-id-list-check

• iam-oidc-provider-tagged

• iam-password-policy

• iam-policy-blacklist-check

• iam-kebijakan-deskripsi

• iam-kebijakan yang digunakan

• iam-kebijakan-tidak-pernyataan-dengan-admin-akses

• iam-kebijakan-tidak-pernyataan-dengan-akses penuh

• iam-role-managed-policy-check

• iam-root-akses-kunci-cek

• iam-saml-provider-tagged

• iam-server-sertifikat-kadaluarsa-cek

• iam-server-sertifikat-ditandai

• iam-user-group-membership-check

• iam-user-mfa-diaktifkan

• iam-user-no-policies-check

• iam-user-unused-credentials-check

• imagebuilder-distributionconfiguration-tagged

• tagged imagebuilder-imagepipeline

• imagebuilder-imagerecipe-ebs-volumes-dienkripsi

• imagebuilder-imagerecipe-tagged

• imagebuilder-infrastructureconfiguration-tagged

• masuk-ssh-dinonaktifkan

• inspector-ec2-scan-enabled

• inspector-ecr-scan-enabled

• inspector-lambda-code-scan-enabled

• inspector-lambda-standard-scan-enabled

• contoh-dalam-vpc

• internet-gateway-diotorisasi-vpc saja

• iotdevicedefender-custom-metric-tagged

• iotevents-alarm-model-tagged

• iotevents-detector-model-tagged

• iotevents-input-tagged

• iotsitewise-aset-model-tagged

• iotsitewise-dashboard-tagged

• dengan tag iotsitewise-gateway

• iotsitewise-portal-tagged

• iotsitewise-project-tagged

• iottwinmaker-komponen-tipe-tagged

• iottwinmaker-entity-tagged

• iottwinmaker-scene-tagged

• iottwinmaker-sync-job-tagged

• iottwinmaker-workspace-tagged

• dengan tag tugas iotwireless-fuota

• iotwireless-multicast-group-tagged

• iotwireless-service-profile-tagged

• iot-authorizer-token-signing-enabled

• template pekerjaan iot-tag

• iot-provisioning-template-description

• iot-penyediaan-template-jitp

• iot-provisioning-template-tagged

• diberi tag audit berjadwal iot

• ivs-channel-playback-otorisasi-diaktifkan

• ivs-channel-tag

• ivs-playback-key-pair-tagged

• ivs-perekaman-konfigurasi-tagged

• kendra-index-tagged

• kinesisvideo-signalingchannel-tagged

• kinesisvideo-stream-tagged

• kinesis-firehose-delivery-stream-dienkripsi

• kinesis-stream-backup-retensi-cek

• kinesis-stream-terenkripsi

• kinesis-video-aliran-minimum-retensi data

• kms-cmk-tidak-menjadwalkan-untuk-penghapusan

• kms-kunci-kebijakan-tidak-akses publik

• kms-key-tagged

• lambda-concurrency-check

• lambda-dlq cek

• lambda-fungsi-aplikasi-log-level-check

• deskripsi fungsi lambda

• lambda-fungsi-log-format-json

• lambda-fungsi-publik-akses-dilarang

• lambda-fungsi-pengaturan-cek

• lambda-fungsi-sistem-log-pemeriksaan-tingkat

• lambda-fungsi-xray diaktifkan

• lambda-dalam-vpc

• lambda-vpc-multi-az-cek

• lightsail-bucket-allow-public-overrides-disabled

• lightsail-bucket-object-versioning-enabled

• lightsail-bucket-tagged

• lightsail-certificate-tagged

• dengan tag lightsail-disk

• macie-auto-sensitif-data-penemuan-cek

• macie-status-check

• mariadb-menerbitkan-log-ke-cloudwatch-log

• mediapackage-packagingconfiguration-tagged

• mediatailor-playbackconfiguration-tagged

• memorydb-subnetgroup dengan tag

• mfa-diaktifkan-untuk-iam-konsol-akses

• mq-active-broker-ldap-otentikasi

• modus penerapan mq-aktif

• mq-active-single-instance-broker-penyimpanan-tipe-efs

• mq-automatic-minor-version-upgrade-enabled

• mq-auto-minor-version-upgrade-enabled

• mq-broker-umum-loging-diaktifkan

• mq-cloudwatch-audit-logging-diaktifkan

• mq-cloudwatch-audit-log-diaktifkan

• mq-tidak-akses publik

• modus penyebaran mq-kelinci

• msk-cluster-publik-akses-dinonaktifkan

• msk-cluster dengan tag

• msk-connect-connector-logging-enabled

• msk-enhanced-monitoring-enabled

• msk-in-cluster-node-require-tls

• msk-unrestricted-access-check

• multi-wilayah-cloud-trail-diaktifkan

• nacl-no-unrestricted-ssh-rdp

• neptunus-cluster-cadangan-retensi-cek

• neptune-cluster-cloudwatch-log-ekspor diaktifkan

• neptune-cluster-copy-tag-ke-snapshot diaktifkan

• neptunus-cluster-deletion-protection-enabled

• neptune-cluster-terenkripsi

• neptune-cluster-iam-database-otentikasi

• neptune-cluster-multi-az-diaktifkan

• neptune-cluster-snapshot-dienkripsi

• neptune-cluster-snapshot-iam-database-auth-enabled

• neptune-cluster-snapshot-publik-dilarang

• netfw-deletion-protection-enabled

• netfw-logging-diaktifkan

• netfw-multi-az-diaktifkan

• paket netfw-policy-default-tindakan-fragmen

• netfw-policy-default-tindakan-paket penuh

• netfw-kebijakan-aturan-kelompok-terkait

• netfw-stateless-rule-group-tidak-kosong

• netfw-subnet-change-protection-enabled

• nlb-cross-zone-load-balancing-enabled

• nlb-internal-skema-cek

• nlb-listener-tagged

• nlb-logging-diaktifkan

• nlb diberi tag

• tanpa batasan-rute-ke-igw

• opensearchserverless-koleksi-deskripsi

• opensearchserverless-collection-standbyreplicas-enabled

• opensearch-access-control-enabled

• opensearch-audit-logging-enabled

• opensearch-data-node-toleransi kesalahan

• opensearch-terenkripsi-di-istirahat

• opensearch-https-diperlukan

• opensearch-in-vpc-only

• opensearch-logs-to-cloudwatch

• opensearch-node-to-node-enkripsi-cek

• opensearch-primery-node-fault-toleransi

• opensearch-update-check

• paket panorama dengan tag

• kelinci-mq-versi yang didukung

• rds-aurora-mysql-audit-logging-diaktifkan

• rds-aurora-postgresql-logs-to-cloudwatch

• rds-automatic-minor-version-upgrade-enabled

• rds-cluster-auto-minor-version-upgrade-enable

• rds-cluster-cadangan-retensi-periksa

• rds-cluster-default-admin-check

• rds-cluster-deletion-protection-enabled

• rds-cluster-terenkripsi-di-istirahat

• rds-cluster-iam-otentikasi diaktifkan

• rds-cluster-multi-az-diaktifkan

• rds-db-security-group-tidak-diizinkan

• rds-enhanced-monitoring-enabled

• rds-event-subscription-tagged

• rds-global-cluster-aurora-mysql-versi yang didukung

• rds-instance-default-admin-check

• rds-instance-deletion-protection-enabled

• rds-instance-iam-otentikasi diaktifkan

• rds-instance-public-access-check

• rds-instance-subnet-igw-check

• rds-dalam-rencana cadangan

• rds-last-backup-recovery-point-dibuat

• rds-logging-diaktifkan

• rds-mariadb-instance-terenkripsi-dalam-transit

• rds-meets-restore-time-target

• dukungan rds-multi-az-

• rds-mysql-cluster-copy-tag-untuk-pemeriksaan snapshot

• rds-mysql-instance-terenkripsi-dalam-transit

• rds-option-group-tagged

• rds-pgsql-cluster-copy-tag-untuk-snapshot-check

• rds-postgresql-logs-ke-cloudwatch

• rds-postgres-instance-terenkripsi-dalam-transit

• rds-proxy-tls-enkripsi

• rds-sumber daya-dilindungi oleh rencana cadangan

• rds-snapshots-publik-dilarang

• rds-snapshot-dienkripsi

• rds-sqlserver-terenkripsi-dalam-transit

• rds-sql-server-log-ke-cloudwatch

• rds-penyimpanan-terenkripsi

• redshift-audit-logging-diaktifkan

• redshift-backup diaktifkan

• redshift-cluster-configuration-check

• redshift-cluster-kms-diaktifkan

• redshift-cluster-maintenance settings-check

• redshift-cluster-multi-az-diaktifkan

• redshift-cluster-parameter-group-tagged

• redshift-cluster-public-access-check

• redshift-cluster-subnet-grup-multi-az

• redshift-default-admin-check

• redshift-default-db-name-check

• redshift-enhanced-vpc-routing-enabled

• redshift-require-tls-ssl

• redshift-serverless-default-admin-check

• redshift-serverless-default-db-name-check

• redshift-serverless-namespace-cmk-enkripsi

• redshift-serverless-publish-logs-to-cloudwatch

• redshift-serverless-workgroup-terenkripsi-dalam-transit

• redshift-serverless-workgroup-no-public-access

• redshift-serverless-workgroup-route-dalam-vpc

• redshift-unrestricted-port-access

• tag yang dibutuhkan

• resiliencehub-app-tagged

• resiliencehub-resiliencypolicy-tagged

• lalu lintas masuk terbatas

• akun-akun-perangkat keras-mfa-diaktifkan

• akun-akun-mfa-diaktifkan

• route53-pemeriksaan kesehatan ditandai

• route53-hosted-zone-tagged

• route53-query-logging-diaktifkan

• route53-resolver-firewall-domain-list-tagged

• route53-resolver-firewall-rule-group-association-tagged

• route53-resolver-firewall-rule-group-tagged

• route53-resolver-resolver-endpoint ditandai

• route53-resolver-resolver-rule-tagged

• rum-app-monitor-cloudwatch-logs-diaktifkan

• dengan tag rum-app-monitor-

• s3express-dir-bucket-lifecycle-aturan-check

• s3-access-point-in-vpc-only

• s3-access-point-publik-akses-blok

• s3-akun-tingkat-akses-publik-blok

• s3-akun-tingkat-akses-publik-blok-periodik

• s3-ember-acl-dilarang

• s3-ember-blacklist-tindakan-dilarang

• s3-bucket-lintas-wilayah-replikasi-diaktifkan

• s3-bucket-default-lock-enabled

• s3-ember-tingkat-akses-publik-dilarang

• s3-bucket-loging-diaktifkan

• s3-bucket-mfa-delete-enabled

• s3-bucket-policy-grantee-check

• s3-bucket-policy-tidak-lebih-permisif

• s3-ember-publik-baca-dilarang

• s3-ember-publik-tulis-dilarang

• s3-bucket-replikasi-diaktifkan

• s3-bucket-server-side-enkripsi diaktifkan

• s3-bucket-ssl-permintaan-saja

• s3-ember dengan tag

• s3-bucket-versioning-diaktifkan

• s3-default-enkripsi-kms

• s3-direktori-bucket-lifecycle-policy-aturan-check

• s3-acara-notifikasi-diaktifkan

• s3-last-backup-recovery-point-created

• s3-lifecycle-policy-check

• s3-bertemu-pulih-waktu-target

• s3-sumber daya-dalam-logis-udara-gapped-vault

• s3-sumber daya-dilindungi oleh rencana cadangan

• s3-versi-lifecycle-policy-check

• sagemaker-app-image-config-tagged

• sagemaker-data-kualitas-pekerjaan-terenkripsi-dalam-transit

• sagemaker-data-kualitas-pekerjaan-isolasi

• pembuat sagemer-domain-di-vpc

• dengan tag domain pembuat sagemer

• sagemaker-endpoint-konfigurasi-kms-kunci-dikonfigurasi

• sagemaker-endpoint-config-prod-instance-count

• sagemaker-featuregroup-deskripsi

• sagemaker-featuregroup-enkripsi-di-istirahat

• sagemaker-featuregroup-online-store-enkripsi

• sagemaker-fitur-grup-tagged

• sagemaker-gambar-deskripsi

• sagemaker-image-tagged

• sagemaker-inferenceexperiment-tagged

• sagemaker-model-bias-pekerjaan-enkripsi-dalam-transit

• pembuat sagemer-model-bias-pekerjaan-isolasi

• sagemaker-model-menjelaskan-pekerjaan-enkripsi-dalam-transit

• pembuat sagemer-model-di-vpc

• sagemaker-model-isolasi-diaktifkan

• sagemaker-model-multicontainer-private-registry

• sagemaker-model-private-registry-diperlukan

• sagemaker-model-kualitas-pekerjaan-enkripsi-dalam-transit

• sagemaker-monitoring-jadwal-isolasi

• sagemaker-notebook-instance-dalam-vpc

• sagemaker-notebook-instance-kms-kunci-dikonfigurasi

• sagemaker-notebook-instance-platform-versi

• sagemaker-notebook-instance-root-access-check

• sagemaker-notebook-tidak-akses internet-langsung

• secretsmanager-rotation-enabled-check

• secretsmanager-schedduled-rotation-success-check

• secretsmanager-rahasia-periodik rotasi

• secretsmanager-rahasia-tidak digunakan

• secretsmanager-menggunakan-cmk

• Securityhub diaktifkan

• keamanan-akun-informasi-disediakan

• layanan-katalog-portfolio-tagged

• layanan-katalog-dibagi-dalam-organisasi

• layanan-vpc-endpoint-enabled

• ses-malware-scanning-diaktifkan

• ses-pengiriman-tls-diperlukan

• shield-advanced-enabled-autorenew

• perisai-drt-akses

• tanda-signingprofile-tagged

• sns-terenkripsi-kms

• sns-topic-message-delivery-notification-enabled

• sns-topik-tidak-akses publik

• sqs-antrian-dlq-cek

• sqs-antrian-tidak-akses publik

• sqs-antrean-kebijakan-pemeriksaan akses penuh

• ssm-automation-blok-berbagi publik

• ssm-otomasi-logging-diaktifkan

• ssm-dokumen-tidak-publik

• ssm-document-tagged

• stepfunctions-state-machine-tagged

• fungsi-langkah-state-mesin-logging-diaktifkan

• storagegateway-last-backup-recovery-point-created

• storagegateway-sumber daya-dalam-logis-udara-gapped-vault

• storagegateway-sumber daya-dilindungi oleh rencana cadangan

• subnet-auto-assign-public-ip-disabled

• transfer-perjanjian-deskripsi

• transfer-agreement-tagged

• transfer-sertifikat-deskripsi

• transfer-sertifikat-ditandai

• transfer-konektor-as2-enkripsi-algoritme-periksa

• transfer-konektor-as2-mdn-penandatanganan-algoritma-periksa

• transfer-konektor-sebagai-penandatanganan-algoritma-periksa

• transfer-konektor-logging-diaktifkan

• transfer-connector-tagged

• transfer-keluarga-server-no-ftp

• transfer-profile-tagged

• transfer-alur kerja-deskripsi

• transfer-workflow-tagged

• virtualmachine-last-backup-recovery-point-created

• virtualmachine-sumber daya-dalam-logis-udara-gapped-vault

• virtualmachine-sumber daya-dilindungi-dengan-rencana cadangan

• vpc-default-security-group-closed

• vpc-endpoint-diaktifkan

• vpc-flow-logs-diaktifkan

• vpc-network-acl-unused-check

• vpc-peering-dns-resolusi-cek

• vpc-sg-port terbuka saja-untuk-resmi

• pemeriksaan pembatasan vpc-sg-port-port

• vpc-vpn-2-terowongan

• wafv2-logging-diaktifkan

• wafv2-rulegroup-logging-diaktifkan

• wafv2-rulegroup-tidak-kosong

• wafv2-webacl-tidak-kosong

• waf-klasik-logging-diaktifkan

• waf-global-rulegroup-tidak-kosong

• waf-global-aturan-tidak-kosong

• waf-global-webacl-tidak-kosong

• waf-regional-rulegroup-tidak-kosong

• waf-regional-aturan-tidak-kosong

• waf-regional-webacl-tidak-kosong

• ruang kerja-koneksi-alias ditandai

• ruang kerja-root-volume-enkripsi-diaktifkan

• ruang kerja-user-volume-enkripsi-diaktifkan

• ruang kerja-ruang kerja-tagged

• akses-kunci-diputar

• akun-bagian-organisasi

• acmpca-sertifikat-otoritas-tagged

• acm-sertifikat-kadaluarsa-cek

• acm-sertifikat-rsa-cek

• acm-sertifikat-transparan-loging-diaktifkan

• acm-pca-root-ca-dinonaktifkan

• aktif-mq-versi yang didukung

• alb-desync-mode-cek

• alb-http-drop-invalid-header-enabled

• pemeriksaan pengalihan alb-http-ke-https-

• alb-internal-skema-cek

• alb-listener-tagged

• dengan tag alb

• alb-waf-diaktifkan

• amplify-app-branch-auto-deletion-enabled

• amplify-app-build-spec-dikonfigurasi

• amplify-app-deskripsi

• amplify-app-no-variabel lingkungan

• amplify-app-platform-check

• amplify-app dengan tag

• amplify-branch-auto-build-enabled

• amplify-branch-build-spec-dikonfigurasi

• amplify-cabang-deskripsi

• amplify-branch-framework-dikonfigurasi

• amplify-branch-performance-mode-enabled

• amplify-branch-pull-request-preview-enabled

• amplify-branch-tagged

• apigatewayv2-integrasi-pribadi-https-diaktifkan

• apigatewayv2-tahap-deskripsi

• apigateway-domain-nama-tls-check

• apigateway-stage-access-logs-enabled

• apigateway-tahap-deskripsi

• api-gwv2-access-logs-enabled

• api-gwv2-otorisasi-tipe-dikonfigurasi

• api-gwv2-tahap-default-route-detailed-metrics-enabled

• api-gw-terkait-dengan-waf

• api-gw-cache-diaktifkan-dan-dienkripsi

• api-gw-endpoint-type-check

• api-gw-eksekusi-loging-diaktifkan

• dengan tag api-gw-rest-api

• api-gw-ssl-diaktifkan

• dengan tag api-gw-stage

• api-gw-xray diaktifkan

• appconfig-aplikasi-deskripsi

• appconfig-application-tagged

• appconfig-configuration-profile-tagged

• appconfig-configuration-profile-validators-tidak-kosong

• appconfig-deployment-strategy-description

• appconfig-deployment-strategy-minimum-final-bake-time

• appconfig-deployment-strategy-replicate-to-ssm

• appconfig-deployment-strategy-tagged

• appconfig-lingkungan-deskripsi

• appconfig-environment-tagged

• dengan tag appconfig-extension-association

• appconfig-freeform-profile-config-storage

• appconfig-hosted-configuration-version-description

• dengan tag appflow-flow-

• appflow-flow-trigger-type-check

• appmesh-gateway-route-tagged

• appmesh-mesh-deny-tcp-forwarding

• appmesh-mesh-ip-pref-check

• dengan tag appmesh-mesh

• dengan tag rute appmesh

• appmesh-virtual-gateway-backend-defaults-tls

• appmesh-virtual-gateway-listeners-health-check-enabled

• appmesh-virtual-gateway-logging-file-path-ada

• dengan tag appmesh-virtual-gateway

• appmesh-virtual-node-backend-defaults-tls-on

• appmesh-virtual-node-cloud-map-ip-pref-check

• appmesh-virtual-node-dns-ip-pref-check

• appmesh-virtual-node-listeners-health-check-enabled

• appmesh-virtual-node-listeners-outlier-detect-enabled

• appmesh-virtual-node-logging-file-path-ada

• appmesh-virtual-node-service-backends-tls-diberlakukan

• appmesh-virtual-node-tagged

• appmesh-virtual-router ditandai

• appmesh-virtual-service-tagged

• disetujui-amis-oleh-id

• disetujui-amis-demi-tag

• appsync-terkait-dengan-waf

• appsync-otorisasi-periksa

• appsync-cache-enkripsi-di-istirahat

• appsync-graphql-api-xray diaktifkan

• appsync-logging-diaktifkan

• athena-data-katalog-deskripsi

• athena-persiapan-pernyataan-deskripsi

• athena-workgroup-deskripsi

• athena-workgroup-terenkripsi-di-istirahat

• athena-workgroup-enforce-workgroup-konfigurasi

• athena-workgroup-engine-versi-auto-upgrade

• athena-workgroup-logging-enabled

• auditmanager-assesment-tagged

• aurora-global-database-enkripsi-di-istirahat

• aurora-last-backup-recovery-point-created

• aurora-bertemu-pulih-waktu-target

• aurora-mysql-backtracking-diaktifkan

• aurora-mysql-cluster-audit-logging

• aurora-sumber daya-dalam-logis-udara-gapped-vault

• aurora-sumber daya-dilindungi oleh rencana cadangan

• penyeimbangan kembali kapasitas-penskalaan otomatis

• autoscaling-group-elb-healthcheck-required

• autoscaling-launchconfig-requires-imdsv2

• autoscaling-launch-config-hop-limit

• autoscaling-launch-config-public-ip-disabled

• Templat Peluncuran Penskalaan Otomatis

• penskalaan otomatis-ganda-az

• autoscaling-multiple-instance-types

• backup-rencana-min-frekuensi-dan-min-retensi-cek

• backup-recovery-point-dienkripsi

• backup-recovery-point-manual-deletion-dinonaktifkan

• pencadangan-pemulihan-titik-minimum-retensi-cek

• batch-compute-environment-enabled

• batch-compute-environment-managed

• batch-compute-environment-tagged

• batch-job-antrean-diaktifkan

• antrean pekerjaan batch ditandai

• templat peluncuran-komputasi-komputasi yang dikelola batch

• batch-managed-compute-env-allocation-strategy-check

• batch-managed-compute-env-compute-resources-tagged

• batch-managed-spot-compute-environment-max-bid

• batch-scheduling-policy-tagged

• beanstalk-enhanced-health-reporting-enabled

• cassandra-keyspace-tagged

• clb-desync-mode-cek

• clb-ganda-az

• cloudformation-stack-drift-detection-check

• cloudformation-stack-notification-check

• cloudformation-stack-service-role-check

• cloudformation-termination-protection-check

• cloudtrail-semua-baca-s3-data-event-check

• cloudtrail-all-write-s3-data-event-check

• cloudtrail-acara-data-toko-multi-wilayah

• cloudtrail-s3-bucket-akses-logging

• cloudtrail-s3-bucket-publik-akses-dilarang

• cloudtrail-s3-dataevents-diaktifkan

• cloudtrail-security-trail-enabled

• cloudwatch-alarm-tindakan-cek

• cloudwatch-alarm-action-activled-check

• cloudwatch-alarm-deskripsi

• cloudwatch-alarm-pemeriksaan sumber daya

• cloudwatch-alarm-setting-check

• cloudwatch-log-group-dienkripsi

• cloudwatch-metric-stream-tagged

• cloud-trail-cloud-watch-logs-diaktifkan

• cloud-trail-diaktifkan

• cloud-trail-enkripsi diaktifkan

• cloud-trail-log-file-validation-diaktifkan

• cmk-backing-kunci-rotasi diaktifkan

• codebuild-project-artifact-enkripsi

• codebuild-project-environment-privileged-check

• codebuild-project-envvar-awscred-check

• codebuild-project-logging-diaktifkan

• codebuild-project-s3-logs-dienkripsi

• codebuild-project-source-repo-url-check

• codebuild-project-tagged

• codebuild-report-group-encrypted-at-rest

• codebuild-report-group-tagged

• codedeploy-auto-rollback-monitor-enabled

• codedeploy-deployment-group-auto-rollback-enabled

• codedeploy-deployment-group-outdated-instances-update

• codedeploy-ec2-minimum-healthy-hosts-dikonfigurasi

• codedeploy-lambda-allatonce-traffic-shift-disabled

• codepipeline-deployment-count-check

• codepipeline-region-fanout-check

• cognito-identity-pool-unauthenticated-logins

• cognito-identity-pool-unauth-access-check

• cognito-userpool-cust-auth-threat-full-check

• cognito-user-pool-advanced-security-enabled

• cognito-user-pool-deletion-protection-enabled

• cognito-user-pool-mfa-diaktifkan

• cognito-user-pool-password-policy-check

• cognito-user-pool-tagged

• custom-eventbus-policy-attached

• custom-schema-registry-policy-attached

• cw-loggroup-retensi-periode-check

• datasync-location-object-storage-menggunakan-https

• datasync-task-data-verifikasi-diaktifkan

• datasync-task-logging-diaktifkan

• dengan tag tugas inkron data

• dax-enkripsi diaktifkan

• enkripsi titik akhir dax-tls-

• db-instance-backup diaktifkan

• keinginan-instance-tenancy

• tipe instans yang diinginkan

• dms-auto-minor-versi-upgrade-check

• dms-endpoint-ssl-dikonfigurasi

• dms-titik akhir ditandai

• dms-mongo-db-otentikasi diaktifkan

• dms-neptune-iam-otorisasi diaktifkan

• dms-redis-tls-diaktifkan

• dms-replikasi-instance-multi-az-diaktifkan

• dms-replikasi-tidak-publik

• dms-replikasi-tugas-sumber-logging

• dms-replikasi-task-tagged

• dms-replikasi-tugas-targetdb-logging

• dynamodb-autoscaling-diaktifkan

• dinamodb-dalam-rencana cadangan

• dynamodb-last-backup-recovery-point-created

• dynamodb-meets-restore-time-target

• dynamodb-pitr-diaktifkan

• dynamodb-sumber daya-dilindungi oleh rencana cadangan

• dynamodb-table-deletion-protection-enabled

• dynamodb-table-terenkripsi-kms

• dynamodb-table-enkripsi-diaktifkan

• dynamodb-throughput-limit-check

• ebs-in-backup-plan

• ebs-last-backup-recovery-point-created

• ebs-bertemu-pulih-waktu-target

• contoh yang dioptimalkan ebs

• ebs-sumber daya-dalam-logis-udara-gapped-vault

• ebs-sumber daya-dilindungi oleh rencana cadangan

• ebs-snapshot-blok-akses publik

• ebs-snapshot-public-restorable check

• ec2-capacity-reservation-tagged

• ec2-client-vpn-koneksi-log-diaktifkan

• ec2-client-vpn-endpoint-tagged

• ec2-client-vpn-tidak-otorisasi-semua

• ec2-dhcp-options-tagged

• ec2-ebs-enkripsi-secara default

• ec2-enis-source-destination-check-diaktifkan

• ec2-fleet-tag

• ec2-imdsv2-periksa

• ec2-instance-detailed-monitoring-enabled

• ec2-instance-launched-dengan-allowed-ami

• ec2-instance-dikelola oleh ssm

• ec2-instance-multiple-eni-check

• ec2-instance-tidak-publik-ip

• ec2-instance-profile-terlampir

• dengan tag ec2-ipamscope

• ec2-last-backup-recovery-point-dibuat

• ec2-launchtemplate-ebs-dienkripsi

• ec2-launch-templates-ebs-volume-terenkripsi

• ec2-launch-template-imdsv2-cek

• ec2-launch-template-public-ip-disabled

• ec2-launch-template-tagged

• ec2-managedinstance-aplikasi-daftar hitam

• ec2-managedinstance-aplikasi-diperlukan

• ec2-managedinstance-association-compliance-status-check

• ec2-managedinstance-inventaris-daftar hitam

• ec2-managedinstance-patch-compliance-status-check

• ec2-managedinstance-platform-check

• ec2-bertemu-pulih-waktu-target

• ec2-network-insights-access-scope-analysis-tagged

• ec2-network-insights-access-scope-tagged

• ec2-network-insights-analysis-tagged

• ec2-network-insights-path-tagged

• ec2-no-amazon-kunci-pasangan

• ec2-paravirtual-instance-check

• ec2-prefix-list-tagged

• ec2-sumber daya-dalam-logis-udara-gapped-vault

• ec2-sumber daya-dilindungi oleh rencana cadangan

• ec2-security-group-dilampirkan ke eni

• ec2-security-group-dilampirkan-untuk-eni-periodik

• ec2-spot-fleet-request-ct-enkripsi-di-istirahat

• ec2-stopped-instance

• ec2-token-hop-limit-check

• ec2-trafic-mirror-filter-deskripsi

• ec2-traffic-mirror-filter-tagged

• ec2-lalu lintas-cermin-sesi-deskripsi

• ec2-lalu lintas-cermin-sesi ditandai

• ec2-lalu lintas-cermin-target-deskripsi

• ec2-trafic-mirror-target-tagged

• ec2-transit-gateway-auto-vpc-attach-disabled

• ec2-transit-gateway-multicast-domain-ditandai

• ec2-volume-inuse-check

• ec2-vpn-koneksi-ike-versi-periksa

• ec2-vpn-koneksi-loging-diaktifkan

• ec2-vpn-koneksi ditandai

• ecr-private-image-scanning-enabled

• ecr-private-lifecycle-policy-dikonfigurasi

• ecr-private-tag-immutability-enabled

• ecr-repository-cmk-enkripsi diaktifkan

• ecr-repository-tagged

• ecs-awsvpc-networking-diaktifkan

• ecs-capacity-provider-tagged

• ecs-kapasitas-penyedia-terminasi-cek

• ecs-wadah-tidak memiliki hak istimewa

• ecs-containers-readonly-access

• ecs-container-insights-enabled

• ecs-fargate-versi platform-terbaru

• ecs-no-lingkungan-rahasia

• ecs-service-propagate-tags-enabled

• ecs-task-definition-efs-enkripsi-diaktifkan

• ecs-task-definition-linux-pengguna-non-root

• ecs-task-definition-log-konfigurasi

• ecs-task-definition-memory-hard-limit

• ecs-task-definition-network-mode-bukan-host

• ecs-task-definition-nonroot-user

• ecs-task-definition-pid-mode-check

• ecs-task-definition-pengguna-untuk-host-mode-check

• ecs-task-definition-windows-pengguna-non-admin

• efs-access-point-enforce-root-directory

• efs-access-point-enforce-user-identity

• efs-automatic-backup diaktifkan

• efs-terenkripsi cek

• efs-filesystem-ct-dienkripsi

• efs-file-system-ditandai

• rencana efs-in-backup

• efs-last-backup-recovery-point-created

• efs-meets-restore-time-target

• efs-mount-target-public-accessible

• efs-sumber daya-dalam-logis-udara-gapped-vault

• efs-sumber daya-dilindungi oleh rencana cadangan

• terlampir eip

• eks-addon dengan tag

• eks-cluster-logging-diaktifkan

• eks-cluster-log-diaktifkan

• eks-cluster-versi tertua yang didukung

• eks-cluster-rahasia-dienkripsi

• eks-cluster-versi yang didukung

• eks-endpoint-tidak-akses publik

• eks-fargate-profile-tagged

• eks-nodegroup-didukung versi-cek

• eks-rahasia-dienkripsi

• elasticache-automatic-backup-check-diaktifkan

• elasticache-auto-minor-version-upgrade-check

• elasticache-rbac-auth-enabled

• elasticache-redis-cluster-automatic-backup-check

• elasticache-repl-grp-auto-failover-enabled

• elasticache-repl-grp-terenkripsi-di-istirahat

• elasticache-repl-grp-terenkripsi-dalam-transit

• elasticache-repl-grp-redis-auth-enabled

• elasticache-subnet-group-check

• versi mesin yang didukung elasticache-

• elasticbeanstalk-aplikasi-deskripsi

• elasticbeanstalk-aplikasi-versi-deskripsi

• elasticbeanstalk-lingkungan-deskripsi

• elasticsearch-encrypted-at-rest

• elasticsearch-in-vpc-only

• elasticsearch-logs-to-cloudwatch

• elasticsearch-node-to-node-enkripsi-check

• elastis-beanstalk-log-ke-cloudwatch

• elastis-beanstalk-managed-updates-enabled

• elbv2-acm-sertifikat-diperlukan

• elbv2-pendengar-enkripsi-dalam-transit

• elbv2-multiple-az

• elbv2-kebijakan keamanan-ssl-check yang telah ditentukan sebelumnya

• elbv2-targetgroup-healthcheck-protocol-dienkripsi

• elbv2-targetgroup-protocol-dienkripsi

• elb-acm-sertifikat-diperlukan

• elb-cross-zone-load-balancing-diaktifkan

• elb-kustom-keamanan-kebijakan-ssl-check

• elb-deletion-proteksi-diaktifkan

• elb-internal-skema-cek

• elb-loging-diaktifkan

• elb-predefined-security-policy-ssl-check

• dengan tag elb

• elb-tls-https-pendengar saja

• emr-blok-akses publik

• emr-kerberos-diaktifkan

• emr-master-tidak-ip publik

• emr-keamanan-konfigurasi-enkripsi-istirahat

• emr-keamanan-konfigurasi-enkripsi-transit

• volume terenkripsi

• eventschemas-discoverer-tagged

• eventschemas-registry-tagged

• event-data-store-cmk-enkripsi-diaktifkan

• fis-experiment-template-log-configuration-exists

• fis-eksperimen-template-tagged

• fms-shield-resource-policy-check

• fms-webacl-resource-policy-check

• fms-webacl-rulegroup-asosiasi-periksa

• fsx-last-backup-recovery-point-created

• fsx-lustre-copy-tag-untuk-backup

• fsx-bertemu-pulih-waktu-target

• fsx-ontap-deployment-type-check

• fsx-openzfs-copy-tag-diaktifkan

• fsx-openzfs-deployment-type-check

• fsx-sumber daya-dilindungi oleh rencana cadangan

• fsx-windows-audit-log-dikonfigurasi

• fsx-windows-deployment-type-check

• glb-listener-tagged

• glb diberi tag

• global-endpoint-event-replikasi-diaktifkan

• lem-pekerjaan-logging-diaktifkan

• lem-ml-transform-terenkripsi-di-istirahat

• lem-ml-transform-tagged

• lem-percikan pekerjaan-versi yang didukung

• guardduty-ec2-protection-runtime-enabled

• guardduty-ecs-protection-runtime-enabled

• guardduty-eks-protection-audit-enabled

• guardduty-eks-protection-runtime-enabled

• perwalian diaktifkan-terpusat

• guardduty-lambda-protection-enabled

• guardduty-malware-protection-enabled

• temuan-non-arsip-temuan-penjagaan

• guardduty-rds-protection-enabled

• guardduty-runtime-monitoring-enabled

• guardduty-s3-protection-enabled

• iam-customer-policy-blocked-kms-actions

• iam-eksternal-access-analyzer-enabled

• iam-group-memiliki-pengguna-periksa

• iam-inline-policy-blocked-kms-actions

• iam-no-inline-policy-check

• iam-password-policy

• iam-policy-blacklist-check

• iam-kebijakan-deskripsi

• iam-kebijakan yang digunakan

• iam-kebijakan-tidak-pernyataan-dengan-admin-akses

• iam-kebijakan-tidak-pernyataan-dengan-akses penuh

• iam-role-managed-policy-check

• iam-root-akses-kunci-cek

• iam-user-group-membership-check

• iam-user-mfa-diaktifkan

• iam-user-no-policies-check

• iam-user-unused-credentials-check

• imagebuilder-distributionconfiguration-tagged

• imagebuilder-imagepipeline ditandai

• imagebuilder-imagerecipe-ebs-volumes-dienkripsi

• imagebuilder-imagerecipe-tagged

• imagebuilder-infrastructureconfiguration-tagged

• masuk-ssh-dinonaktifkan

• inspector-ec2-scan-enabled

• inspector-ecr-scan-enabled

• inspector-lambda-standard-scan-enabled

• contoh-dalam-vpc

• internet-gateway-diotorisasi-vpc saja

• iotdevicedefender-custom-metric-tagged

• iot-authorizer-token-signing-enabled

• template pekerjaan iot-tag

• iot-provisioning-template-description

• iot-penyediaan-template-jitp

• iot-provisioning-template-tagged

• diberi tag audit berjadwal iot

• kinesis-firehose-delivery-stream-dienkripsi

• kinesis-stream-backup-retensi-cek

• kinesis-stream-terenkripsi

• kms-cmk-tidak-menjadwalkan-untuk-penghapusan

• kms-kunci-kebijakan-tidak-akses publik

• kms-key-tagged

• lambda-concurrency-check

• lambda-dlq cek

• lambda-fungsi-aplikasi-log-level-check

• deskripsi fungsi lambda

• lambda-fungsi-log-format-json

• lambda-fungsi-publik-akses-dilarang

• lambda-fungsi-pengaturan-cek

• lambda-fungsi-sistem-log-pemeriksaan-tingkat

• lambda-fungsi-xray diaktifkan

• lambda-dalam-vpc

• lambda-vpc-multi-az-cek

• macie-auto-sensitif-data-penemuan-cek

• macie-status-check

• mariadb-menerbitkan-log-ke-cloudwatch-log

• mediapackage-packagingconfiguration-tagged

• memorydb-subnetgroup dengan tag

• mfa-diaktifkan-untuk-iam-konsol-akses

• mq-active-broker-ldap-otentikasi

• modus penerapan mq-aktif

• mq-active-single-instance-broker-penyimpanan-tipe-efs

• mq-automatic-minor-version-upgrade-enabled

• mq-auto-minor-version-upgrade-enabled

• mq-broker-umum-loging-diaktifkan

• mq-cloudwatch-audit-logging-diaktifkan

• mq-cloudwatch-audit-log-diaktifkan

• mq-tidak-akses publik

• modus penyebaran mq-kelinci

• msk-cluster-publik-akses-dinonaktifkan

• msk-cluster dengan tag

• msk-connect-connector-logging-enabled

• msk-enhanced-monitoring-enabled

• msk-in-cluster-node-require-tls

• msk-unrestricted-access-check

• multi-wilayah-cloud-trail-diaktifkan

• nacl-no-unrestricted-ssh-rdp

• neptunus-cluster-cadangan-retensi-cek

• neptune-cluster-cloudwatch-log-ekspor diaktifkan

• neptune-cluster-copy-tag-ke-snapshot diaktifkan

• neptunus-cluster-deletion-protection-enabled

• neptune-cluster-terenkripsi

• neptune-cluster-iam-database-otentikasi

• neptune-cluster-multi-az-diaktifkan

• neptune-cluster-snapshot-dienkripsi

• neptune-cluster-snapshot-iam-database-auth-enabled

• neptune-cluster-snapshot-publik-dilarang

• netfw-deletion-protection-enabled

• netfw-logging-diaktifkan

• netfw-multi-az-diaktifkan

• paket netfw-policy-default-tindakan-fragmen

• netfw-policy-default-tindakan-paket penuh

• netfw-policy-aturan-group-related

• netfw-stateless-rule-group-tidak-kosong

• netfw-subnet-change-protection-enabled

• nlb-cross-zone-load-balancing-enabled

• nlb-internal-skema-cek

• nlb-listener-tagged

• nlb-logging-diaktifkan

• nlb diberi tag

• tanpa batasan-rute-ke-igw

• opensearch-access-control-enabled

• opensearch-audit-logging-enabled

• opensearch-data-node-toleransi kesalahan

• opensearch-terenkripsi-di-istirahat

• opensearch-https-diperlukan

• opensearch-in-vpc-only

• opensearch-logs-to-cloudwatch

• opensearch-node-to-node-enkripsi-cek

• opensearch-primery-node-fault-toleransi

• opensearch-update-check

• kelinci-mq-versi yang didukung

• rds-aurora-mysql-audit-logging-diaktifkan

• rds-aurora-postgresql-logs-to-cloudwatch

• rds-automatic-minor-version-upgrade-enabled

• rds-cluster-cadangan-retensi-periksa

• rds-cluster-default-admin-check

• rds-cluster-deletion-protection-enabled

• rds-cluster-terenkripsi-di-istirahat

• rds-cluster-iam-otentikasi diaktifkan

• rds-cluster-multi-az-diaktifkan

• rds-db-security-group-tidak-diizinkan

• rds-enhanced-monitoring-enabled

• rds-event-subscription-tagged

• rds-global-cluster-aurora-mysql-versi yang didukung

• rds-instance-default-admin-check

• rds-instance-deletion-protection-enabled

• rds-instance-iam-otentikasi diaktifkan

• rds-instance-public-access-check

• rds-instance-subnet-igw-check

• rds-dalam-rencana cadangan

• rds-last-backup-recovery-point-dibuat

• rds-logging-diaktifkan

• rds-mariadb-instance-terenkripsi-dalam-transit

• rds-meets-restore-time-target

• dukungan rds-multi-az-

• rds-mysql-instance-terenkripsi-dalam-transit

• rds-option-group-tagged

• rds-postgresql-logs-ke-cloudwatch

• rds-postgres-instance-terenkripsi-dalam-transit

• rds-proxy-tls-enkripsi

• rds-sumber daya-dilindungi oleh rencana cadangan

• rds-snapshots-publik-dilarang

• rds-snapshot-dienkripsi

• rds-sqlserver-terenkripsi-dalam-transit

• rds-sql-server-log-ke-cloudwatch

• rds-penyimpanan-terenkripsi

• redshift-audit-logging-diaktifkan

• redshift-backup diaktifkan

• redshift-cluster-configuration-check

• redshift-cluster-kms-diaktifkan

• redshift-cluster-maintenance settings-check

• redshift-cluster-parameter-group-tagged

• redshift-cluster-public-access-check

• redshift-cluster-subnet-grup-multi-az

• redshift-default-admin-check

• redshift-default-db-name-check

• redshift-enhanced-vpc-routing-enabled

• redshift-require-tls-ssl

• redshift-serverless-default-admin-check

• redshift-serverless-default-db-name-check

• redshift-serverless-namespace-cmk-enkripsi

• redshift-serverless-publish-logs-to-cloudwatch

• redshift-serverless-workgroup-terenkripsi-dalam-transit

• redshift-serverless-workgroup-no-public-access

• redshift-serverless-workgroup-route-dalam-vpc

• redshift-unrestricted-port-access

• tag yang dibutuhkan

• resiliencehub-app-tagged

• resiliencehub-resiliencypolicy-tagged

• lalu lintas masuk terbatas

• akun-akun-perangkat keras-mfa-diaktifkan

• akun-akun-mfa-diaktifkan

• route53-resolver-firewall-domain-list-tagged

• route53-resolver-firewall-rule-group-association-tagged

• route53-resolver-firewall-rule-group-tagged

• route53-resolver-resolver-endpoint ditandai

• route53-resolver-resolver-rule-tagged

• rum-app-monitor-cloudwatch-logs-diaktifkan

• dengan tag rum-app-monitor-

• s3-access-point-in-vpc-only

• s3-access-point-publik-akses-blok

• s3-akun-tingkat-akses-publik-blok

• s3-akun-tingkat-akses-publik-blok-periodik

• s3-ember-acl-dilarang

• s3-ember-blacklist-tindakan-dilarang

• s3-bucket-lintas-wilayah-replikasi-diaktifkan

• s3-bucket-default-lock-enabled

• s3-ember-tingkat-akses-publik-dilarang

• s3-bucket-loging-diaktifkan

• s3-bucket-mfa-delete-enabled

• s3-bucket-policy-grantee-check

• s3-bucket-policy-tidak-lebih-permisif

• s3-ember-publik-baca-dilarang

• s3-ember-publik-tulis-dilarang

• s3-bucket-replikasi-diaktifkan

• s3-bucket-server-side-enkripsi diaktifkan

• s3-bucket-ssl-permintaan-saja

• s3-bucket-tagged

• s3-bucket-versioning-diaktifkan

• s3-default-enkripsi-kms

• s3-acara-notifikasi-diaktifkan

• s3-last-backup-recovery-point-created

• s3-lifecycle-policy-check

• s3-bertemu-puluh-waktu-target

• s3-sumber daya-dalam-logis-udara-gapped-vault

• s3-sumber daya-dilindungi oleh rencana cadangan

• s3-versi-lifecycle-policy-check

• sagemaker-app-image-config-tagged

• sagemaker-data-kualitas-pekerjaan-terenkripsi-dalam-transit

• sagemaker-data-kualitas-pekerjaan-isolasi

• pembuat sagemer-domain-di-vpc

• dengan tag domain pembuat sagemer

• sagemaker-endpoint-konfigurasi-kms-kunci-dikonfigurasi

• sagemaker-endpoint-config-prod-instance-count

• sagemaker-featuregroup-deskripsi

• sagemaker-featuregroup-enkripsi-di-istirahat

• sagemaker-featuregroup-online-store-enkripsi

• sagemaker-fitur-grup-tagged

• sagemaker-gambar-deskripsi

• sagemaker-image-tagged

• sagemaker-inferenceexperiment-tagged

• sagemaker-model-bias-pekerjaan-enkripsi-dalam-transit

• pembuat sagemer-model-bias-pekerjaan-isolasi

• sagemaker-model-menjelaskan-pekerjaan-enkripsi-dalam-transit

• pembuat sagemer-model-di-vpc

• sagemaker-model-isolasi-diaktifkan

• sagemaker-model-multicontainer-private-registry

• sagemaker-model-private-registry-diperlukan

• sagemaker-model-kualitas-pekerjaan-enkripsi-dalam-transit

• sagemaker-monitoring-jadwal-isolasi

• sagemaker-notebook-instance-dalam-vpc

• sagemaker-notebook-instance-kms-kunci-dikonfigurasi

• sagemaker-notebook-instance-platform-versi

• sagemaker-notebook-instance-root-access-check

• sagemaker-notebook-tidak-akses internet-langsung

• secretsmanager-rotation-enabled-check

• secretsmanager-schedduled-rotation-success-check

• secretsmanager-rahasia-periodik rotasi

• secretsmanager-rahasia-tidak digunakan

• secretsmanager-menggunakan-cmk

• Securityhub diaktifkan

• keamanan-akun-informasi-disediakan

• layanan-katalog-portfolio-tagged

• layanan-katalog-dibagi-dalam-organisasi

• layanan-vpc-endpoint-enabled

• ses-pengiriman-tls-diperlukan

• tanda-signingprofile-tagged

• sns-terenkripsi-kms

• sns-topic-message-delivery-notification-enabled

• sns-topik-tidak-akses publik

• sqs-antrian-dlq-cek

• sqs-antrian-tidak-akses publik

• sqs-antrean-kebijakan-pemeriksaan akses penuh

• ssm-automation-blok-berbagi publik

• ssm-otomasi-logging-diaktifkan

• ssm-dokumen-tidak-publik

• ssm-document-tagged

• stepfunctions-state-machine-tagged

• fungsi-langkah-state-mesin-logging-diaktifkan

• storagegateway-last-backup-recovery-point-created

• storagegateway-sumber daya-dalam-logis-udara-gapped-vault

• storagegateway-sumber daya-dilindungi oleh rencana cadangan

• subnet-auto-assign-public-ip-disabled

• transfer-perjanjian-deskripsi

• transfer-agreement-tagged

• transfer-sertifikat-deskripsi

• transfer-sertifikat-ditandai

• transfer-konektor-as2-enkripsi-algoritme-periksa

• transfer-konektor-as2-mdn-penandatanganan-algoritma-periksa

• transfer-konektor-sebagai-penandatanganan-algoritma-periksa

• transfer-konektor-logging-diaktifkan

• transfer-connector-tagged

• transfer-keluarga-server-no-ftp

• transfer-profile-tagged

• transfer-alur kerja-deskripsi

• transfer-workflow-tagged

• virtualmachine-last-backup-recovery-point-created

• virtualmachine-sumber daya-dalam-logis-udara-gapped-vault

• virtualmachine-sumber daya-dilindungi-dengan-rencana cadangan

• vpc-default-security-group-closed

• vpc-endpoint-diaktifkan

• vpc-flow-logs-diaktifkan

• vpc-network-acl-unused-check

• vpc-peering-dns-resolusi-cek

• vpc-sg-port terbuka saja-untuk-resmi

• pemeriksaan pembatasan vpc-sg-port-port

• vpc-vpn-2-terowongan

• wafv2-logging-diaktifkan

• wafv2-rulegroup-logging-diaktifkan

• wafv2-rulegroup-tidak-kosong

• wafv2-webacl-tidak-kosong

• waf-regional-rulegroup-tidak-kosong

• waf-regional-aturan-tidak-kosong

• waf-regional-webacl-tidak-kosong

• akses-kunci-diputar

• akun-bagian-organisasi

• acmpca-sertifikat-otoritas-tagged

• acm-sertifikat-kadaluarsa-cek

• acm-sertifikat-rsa-cek

• acm-sertifikat-transparan-loging-diaktifkan

• acm-pca-root-ca-dinonaktifkan

• aktif-mq-versi yang didukung

• alb-desync-mode-cek

• alb-http-drop-invalid-header-enabled

• pemeriksaan pengalihan alb-http-ke-https-

• alb-internal-skema-cek

• alb-listener-tagged

• dengan tag alb

• alb-waf-diaktifkan

• amplify-app-branch-auto-deletion-enabled

• amplify-app-build-spec-dikonfigurasi

• amplify-app-deskripsi

• amplify-app-no-variabel lingkungan

• amplify-app-platform-check

• amplify-app dengan tag

• amplify-branch-auto-build-enabled

• amplify-branch-build-spec-dikonfigurasi

• amplify-cabang-deskripsi

• amplify-branch-framework-dikonfigurasi

• amplify-branch-performance-mode-enabled

• amplify-branch-pull-request-preview-enabled

• amplify-branch-tagged

• apigatewayv2-integrasi-pribadi-https-diaktifkan

• apigatewayv2-tahap-deskripsi

• apigateway-domain-nama-tls-check

• apigateway-stage-access-logs-enabled

• apigateway-tahap-deskripsi

• api-gwv2-access-logs-enabled

• api-gwv2-otorisasi-tipe-dikonfigurasi

• api-gwv2-tahap-default-route-detailed-metrics-enabled

• api-gw-terkait-dengan-waf

• api-gw-cache-diaktifkan-dan-dienkripsi

• api-gw-endpoint-type-check

• api-gw-eksekusi-loging-diaktifkan

• dengan tag api-gw-rest-api

• api-gw-ssl-diaktifkan

• dengan tag api-gw-stage

• api-gw-xray diaktifkan

• appconfig-aplikasi-deskripsi

• appconfig-application-tagged

• appconfig-configuration-profile-tagged

• appconfig-configuration-profile-validators-tidak-kosong

• appconfig-deployment-strategy-description

• appconfig-deployment-strategy-minimum-final-bake-time

• appconfig-deployment-strategy-replicate-to-ssm

• appconfig-deployment-strategy-tagged

• appconfig-lingkungan-deskripsi

• appconfig-environment-tagged

• dengan tag appconfig-extension-association

• appconfig-freeform-profile-config-storage

• appconfig-hosted-configuration-version-description

• dengan tag appflow-flow-

• appflow-flow-trigger-type-check

• appintegrations-application-approved-origins-check

• appintegrations-aplikasi-tagged

• appintegrations-event-integration-description

• appintegrations-event-integration-tagged

• appmesh-gateway-route-tagged

• appmesh-mesh-deny-tcp-forwarding

• appmesh-mesh-ip-pref-check

• dengan tag appmesh-mesh

• dengan tag rute appmesh

• appmesh-virtual-gateway-backend-defaults-tls

• appmesh-virtual-gateway-listeners-health-check-enabled

• appmesh-virtual-gateway-logging-file-path-ada

• dengan tag appmesh-virtual-gateway

• appmesh-virtual-node-backend-defaults-tls-on

• appmesh-virtual-node-cloud-map-ip-pref-check

• appmesh-virtual-node-dns-ip-pref-check

• appmesh-virtual-node-listeners-health-check-enabled

• appmesh-virtual-node-listeners-outlier-detect-enabled

• appmesh-virtual-node-logging-file-path-ada

• appmesh-virtual-node-service-backends-tls-diberlakukan

• appmesh-virtual-node-tagged

• appmesh-virtual-router ditandai

• appmesh-virtual-service-tagged

• disetujui-amis-oleh-id

• disetujui-amis-demi-tag

• apprunner-layanan-di-vpc

• apprunner-service-ip-alamat-tipe-check

• apprunner-service-max-unhealthy-threshold

• apprunner-layanan-tidak-akses publik

• apprunner-service-observability-enabled

• apprunner-service-tagged

• apprunner-vpc-connector-tagged

• appstream-armada-dalam-vpc

• appsync-terkait-dengan-waf

• appsync-otorisasi-periksa

• appsync-cache-enkripsi-di-istirahat

• appsync-graphql-api-xray diaktifkan

• appsync-logging-diaktifkan

• aps-rule-groups-namespace-tagged

• athena-data-katalog-deskripsi

• athena-persiapan-pernyataan-deskripsi

• athena-workgroup-deskripsi

• athena-workgroup-terenkripsi-di-istirahat

• athena-workgroup-enforce-workgroup-konfigurasi

• athena-workgroup-engine-versi-auto-upgrade

• athena-workgroup-logging-enabled

• auditmanager-assesment-tagged

• aurora-global-database-enkripsi-di-istirahat

• aurora-last-backup-recovery-point-created

• aurora-bertemu-pulih-waktu-target

• aurora-mysql-backtracking-diaktifkan

• aurora-mysql-cluster-audit-logging

• aurora-sumber daya-dalam-logis-udara-gapped-vault

• aurora-sumber daya-dilindungi oleh rencana cadangan

• penyeimbangan kembali kapasitas-penskalaan otomatis

• autoscaling-group-elb-healthcheck-required

• autoscaling-launchconfig-requires-imdsv2

• autoscaling-launch-config-hop-limit

• autoscaling-launch-config-public-ip-disabled

• Templat Peluncuran Penskalaan Otomatis

• penskalaan otomatis-ganda-az

• autoscaling-multiple-instance-types

• backup-rencana-min-frekuensi-dan-min-retensi-cek

• backup-recovery-point-dienkripsi

• backup-recovery-point-manual-deletion-dinonaktifkan

• pencadangan-pemulihan-titik-minimum-retensi-cek

• batch-compute-environment-enabled

• batch-compute-environment-managed

• batch-compute-environment-tagged

• batch-job-antrean-diaktifkan

• antrean pekerjaan batch ditandai

• templat peluncuran-komputasi-komputasi yang dikelola batch

• batch-managed-compute-env-allocation-strategy-check

• batch-managed-compute-env-compute-resources-tagged

• batch-managed-spot-compute-environment-max-bid

• batch-scheduling-policy-tagged

• beanstalk-enhanced-health-reporting-enabled

• bedrockagentcore-gateway-authorizer-enabled

• bedrockagentcore-runtime-private-network-diperlukan

• cassandra-keyspace-tagged

• clb-desync-mode-cek

• clb-ganda-az

• cloudformation-stack-drift-detection-check

• cloudformation-stack-notification-check

• cloudformation-stack-service-role-check

• cloudformation-termination-protection-check

• cloudtrail-semua-baca-s3-data-event-check

• cloudtrail-all-write-s3-data-event-check

• cloudtrail-acara-data-toko-multi-wilayah

• cloudtrail-s3-bucket-akses-logging

• cloudtrail-s3-bucket-publik-akses-dilarang

• cloudtrail-s3-dataevents-diaktifkan

• cloudtrail-security-trail-enabled

• cloudwatch-alarm-tindakan-cek

• cloudwatch-alarm-action-activled-check

• cloudwatch-alarm-deskripsi

• cloudwatch-alarm-pemeriksaan sumber daya

• cloudwatch-alarm-setting-check

• cloudwatch-log-group-dienkripsi

• cloudwatch-metric-stream-tagged

• cloud-trail-cloud-watch-logs-diaktifkan

• cloud-trail-diaktifkan

• cloud-trail-enkripsi diaktifkan

• cloud-trail-log-file-validation-diaktifkan

• cmk-backing-kunci-rotasi diaktifkan

• codeartifact-repository-tagged

• codebuild-project-artifact-enkripsi

• codebuild-project-environment-privileged-check

• codebuild-project-envvar-awscred-check

• codebuild-project-logging-diaktifkan

• codebuild-project-s3-logs-dienkripsi

• codebuild-project-source-repo-url-check

• codebuild-project-tagged

• codebuild-report-group-encrypted-at-rest

• codebuild-report-group-tagged

• codedeploy-auto-rollback-monitor-enabled

• codedeploy-deployment-group-auto-rollback-enabled

• codedeploy-deployment-group-outdated-instances-update

• codedeploy-ec2-minimum-healthy-hosts-dikonfigurasi

• codedeploy-lambda-allatonce-traffic-shift-disabled

• codeguruprofiler-profiling-group-tagged

• codegurureviewer-repository-association-tagged

• codepipeline-deployment-count-check

• codepipeline-region-fanout-check

• cognito-identity-pool-unauthenticated-logins

• cognito-identity-pool-unauth-access-check

• cognito-userpool-cust-auth-threat-full-check

• cognito-user-pool-advanced-security-enabled

• cognito-user-pool-deletion-protection-enabled

• cognito-user-pool-mfa-diaktifkan

• cognito-user-pool-password-policy-check

• cognito-user-pool-tagged

• koneksi-instance-logging-diaktifkan

• customerprofiles-domain-tagged

• customerprofiles-object-type-allow-profile-creation

• customerprofiles-object-type-tagged

• custom-eventbus-policy-attached

• custom-schema-registry-policy-attached

• cw-loggroup-retensi-periode-check

• datasync-location-object-storage-menggunakan-https

• datasync-task-data-verifikasi-diaktifkan

• datasync-task-logging-diaktifkan

• dengan tag tugas inkron data

• dax-enkripsi diaktifkan

• enkripsi titik akhir dax-tls-

• db-instance-backup-diaktifkan

• keinginan-instance-tenancy

• tipe instans yang diinginkan

• devicefarm-instance-profile-tagged

• devicefarm-project-tagged

• devicefarm-test-grid-project-tagged

• dms-auto-minor-versi-upgrade-check

• dms-endpoint-ssl-dikonfigurasi

• dms-titik akhir ditandai

• dms-mongo-db-otentikasi diaktifkan

• dms-neptune-iam-otorisasi diaktifkan

• dms-redis-tls-diaktifkan

• dms-replikasi-instance-multi-az-diaktifkan

• dms-replikasi-tidak-publik

• dms-replikasi-tugas-sumber-logging

• dms-replikasi-task-tagged

• dms-replikasi-tugas-targetdb-logging

• docdb-cluster-audit-logging-diaktifkan

• docdb-cluster-backup-retensi-cek

• docdb-cluster-deletion-protection-enabled

• docdb-cluster-terenkripsi

• docdb-cluster-terenkripsi-dalam-transit

• docdb-cluster-snapshot-publik-dilarang

• dynamodb-autoscaling-diaktifkan

• dinamodb-dalam-rencana cadangan

• dynamodb-last-backup-recovery-point-created

• dynamodb-meets-restore-time-target

• dynamodb-pitr-diaktifkan

• dynamodb-sumber daya-dilindungi oleh rencana cadangan

• dynamodb-table-deletion-protection-enabled

• dynamodb-table-terenkripsi-kms

• dynamodb-table-enkripsi-diaktifkan

• dynamodb-throughput-limit-check

• ebs-in-backup-plan

• ebs-last-backup-recovery-point-created

• ebs-bertemu-pulih-waktu-target

• contoh yang dioptimalkan ebs

• ebs-sumber daya-dalam-logis-udara-gapped-vault

• ebs-sumber daya-dilindungi oleh rencana cadangan

• ebs-snapshot-blok-akses publik

• ebs-snapshot-public-restorable check

• ec2-capacity-reservation-tagged

• diberi tag ec2-carrier-gateway

• ec2-client-vpn-koneksi-log-diaktifkan

• ec2-client-vpn-endpoint-tagged

• ec2-client-vpn-tidak-otorisasi-semua

• ec2-dhcp-options-tagged

• ec2-ebs-enkripsi-secara default

• ec2-enis-source-destination-check-diaktifkan

• ec2-fleet-tag

• ec2-imdsv2-periksa

• ec2-instance-detailed-monitoring-enabled

• ec2-instance-launched-dengan-allowed-ami

• ec2-instance-dikelola oleh ssm

• ec2-instance-multiple-eni-check

• ec2-instance-tidak-publik-ip

• ec2-instance-profile-terlampir

• dengan tag ec2-ipamscope

• ec2-last-backup-recovery-point-dibuat

• ec2-launchtemplate-ebs-dienkripsi

• ec2-launch-templates-ebs-volume-terenkripsi

• ec2-launch-template-imdsv2-cek

• ec2-launch-template-public-ip-disabled

• ec2-launch-template-tagged

• ec2-managedinstance-aplikasi-daftar hitam

• ec2-managedinstance-aplikasi-diperlukan

• ec2-managedinstance-association-compliance-status-check

• ec2-managedinstance-inventaris-daftar hitam

• ec2-managedinstance-patch-compliance-status-check

• ec2-managedinstance-platform-check

• ec2-bertemu-pulih-waktu-target

• ec2-network-insights-access-scope-analysis-tagged

• ec2-network-insights-access-scope-tagged

• ec2-network-insights-analysis-tagged

• ec2-network-insights-path-tagged

• ec2-no-amazon-kunci-pasangan

• ec2-paravirtual-instance-check

• ec2-prefix-list-tagged

• ec2-sumber daya-dalam-logis-udara-gapped-vault

• ec2-sumber daya-dilindungi oleh rencana cadangan

• ec2-security-group-dilampirkan ke eni

• ec2-security-group-dilampirkan-untuk-eni-periodik

• ec2-spot-fleet-request-ct-enkripsi-di-istirahat

• ec2-stopped-instance

• ec2-token-hop-limit-check

• ec2-trafic-mirror-filter-deskripsi

• ec2-traffic-mirror-filter-tagged

• ec2-lalu lintas-cermin-sesi-deskripsi

• ec2-lalu lintas-cermin-sesi ditandai

• ec2-lalu lintas-cermin-target-deskripsi

• ec2-trafic-mirror-target-tagged

• ec2-transit-gateway-auto-vpc-attach-disabled

• ec2-transit-gateway-multicast-domain-ditandai

• ec2-volume-inuse-check

• ec2-vpn-koneksi-ike-versi-periksa

• ec2-vpn-koneksi-loging-diaktifkan

• ec2-vpn-koneksi ditandai

• ecr-private-image-scanning-enabled

• ecr-private-lifecycle-policy-dikonfigurasi

• ecr-private-tag-immutability-enabled

• ecr-repository-cmk-enkripsi diaktifkan

• ecr-repository-tagged

• ecs-awsvpc-networking-diaktifkan

• ecs-capacity-provider-tagged

• ecs-kapasitas-penyedia-terminasi-cek

• ecs-wadah-tidak memiliki hak istimewa

• ecs-containers-readonly-access

• ecs-container-insights-enabled

• ecs-fargate-versi platform-terbaru

• ecs-no-lingkungan-rahasia

• ecs-service-propagate-tags-enabled

• ecs-task-definition-efs-enkripsi-diaktifkan

• ecs-task-definition-linux-pengguna-non-root

• ecs-task-definition-log-konfigurasi

• ecs-task-definition-memory-hard-limit

• ecs-task-definition-network-mode-bukan-host

• ecs-task-definition-nonroot-user

• ecs-task-definition-pid-mode-check

• ecs-task-definition-pengguna-untuk-host-mode-check

• ecs-task-definition-windows-pengguna-non-admin

• efs-access-point-enforce-root-directory

• efs-access-point-enforce-user-identity

• efs-automatic-backup diaktifkan

• efs-terenkripsi cek

• efs-filesystem-ct-dienkripsi

• efs-file-system-ditandai

• rencana efs-in-backup

• efs-last-backup-recovery-point-created

• efs-meets-restore-time-target

• efs-mount-target-public-accessible

• efs-sumber daya-dalam-logis-udara-gapped-vault

• efs-sumber daya-dilindungi oleh rencana cadangan

• terlampir eip

• eks-addon dengan tag

• eks-cluster-logging-diaktifkan

• eks-cluster-log-diaktifkan

• eks-cluster-versi tertua yang didukung

• eks-cluster-rahasia-dienkripsi

• eks-cluster-versi yang didukung

• eks-endpoint-tidak-akses publik

• eks-fargate-profile-tagged

• eks-nodegroup-didukung versi-cek

• eks-rahasia-dienkripsi

• elasticache-automatic-backup-check-diaktifkan

• elasticache-auto-minor-version-upgrade-check

• elasticache-rbac-auth-enabled

• elasticache-redis-cluster-automatic-backup-check

• elasticache-repl-grp-auto-failover-enabled

• elasticache-repl-grp-terenkripsi-di-istirahat

• elasticache-repl-grp-terenkripsi-dalam-transit

• elasticache-repl-grp-redis-auth-enabled

• elasticache-subnet-group-check

• versi mesin yang didukung elasticache-

• elasticbeanstalk-aplikasi-deskripsi

• elasticbeanstalk-aplikasi-versi-deskripsi

• elasticbeanstalk-lingkungan-deskripsi

• elasticsearch-encrypted-at-rest

• elasticsearch-in-vpc-only

• elasticsearch-logs-to-cloudwatch

• elasticsearch-node-to-node-enkripsi-check

• elastis-beanstalk-log-ke-cloudwatch

• elastis-beanstalk-managed-updates-enabled

• elbv2-acm-sertifikat-diperlukan

• elbv2-pendengar-enkripsi-dalam-transit

• elbv2-multiple-az

• elbv2-kebijakan keamanan-ssl-check yang telah ditentukan sebelumnya

• elbv2-targetgroup-healthcheck-protocol-dienkripsi

• elbv2-targetgroup-protocol-dienkripsi

• elb-acm-sertifikat-diperlukan

• elb-cross-zone-load-balancing-diaktifkan

• elb-kustom-keamanan-kebijakan-ssl-check

• elb-deletion-proteksi-diaktifkan

• elb-internal-skema-cek

• elb-loging-diaktifkan

• elb-predefined-security-policy-ssl-check

• dengan tag elb

• elb-tls-https-pendengar saja

• emr-blok-akses publik

• emr-kerberos-diaktifkan

• emr-master-tidak-ip publik

• emr-keamanan-konfigurasi-enkripsi-istirahat

• emr-keamanan-konfigurasi-enkripsi-transit

• volume terenkripsi

• eventschemas-discoverer-tagged

• eventschemas-registry-tagged

• event-data-store-cmk-enkripsi-diaktifkan

• jelas-peluncuran-deskripsi

• jelas-lunch-tagged

• jelas-deskripsi proyek

• jelas-proyek ditandai

• jelas-segmen-deskripsi

• terbukti-segment-tagged

• fis-experiment-template-log-configuration-exists

• fis-eksperimen-template-tagged

• fms-shield-resource-policy-check

• fms-webacl-resource-policy-check

• fms-webacl-rulegroup-asosiasi-periksa

• pendetektor-entitas-tipe-tagged

• pendeteksi penipu dengan label

• pendeteksi penipu dengan tag hasil

• pendetektor-variabel-penipu

• fsx-last-backup-recovery-point-created

• fsx-lustre-copy-tag-untuk-backup

• fsx-bertemu-pulih-waktu-target

• fsx-ontap-deployment-type-check

• fsx-openzfs-copy-tag-diaktifkan

• fsx-openzfs-deployment-type-check

• fsx-sumber daya-dilindungi oleh rencana cadangan

• fsx-windows-audit-log-dikonfigurasi

• fsx-windows-deployment-type-check

• glb-listener-tagged

• glb diberi tag

• global-endpoint-event-replikasi-diaktifkan

• lem-pekerjaan-logging-diaktifkan

• lem-ml-transform-terenkripsi-di-istirahat

• lem-ml-transform-tagged

• lem-percikan pekerjaan-versi yang didukung

• groundstation-config-tagged

• groundstation-dataflowendpointgroup ditandai

• groundstation-missionprofile-tagged

• guardduty-ec2-protection-runtime-enabled

• guardduty-ecs-protection-runtime-enabled

• guardduty-eks-protection-audit-enabled

• guardduty-eks-protection-runtime-enabled

• perwalian diaktifkan-terpusat

• guardduty-lambda-protection-enabled

• guardduty-malware-protection-enabled

• temuan-non-arsip-temuan-penjagaan

• guardduty-rds-protection-enabled

• guardduty-runtime-monitoring-enabled

• guardduty-s3-protection-enabled

• healthlake-fhirdatastore-tagged

• iam-customer-policy-blocked-kms-actions

• iam-eksternal-access-analyzer-enabled

• iam-group-memiliki-pengguna-periksa

• iam-inline-policy-blocked-kms-actions

• iam-no-inline-policy-check

• iam-password-policy

• iam-policy-blacklist-check

• iam-kebijakan-deskripsi

• iam-kebijakan yang digunakan

• iam-kebijakan-tidak-pernyataan-dengan-admin-akses

• iam-kebijakan-tidak-pernyataan-dengan-akses penuh

• iam-role-managed-policy-check

• iam-root-akses-kunci-cek

• iam-user-group-membership-check

• iam-user-mfa-diaktifkan

• iam-user-no-policies-check

• iam-user-unused-credentials-check

• imagebuilder-distributionconfiguration-tagged

• imagebuilder-imagepipeline ditandai

• imagebuilder-imagerecipe-ebs-volumes-dienkripsi

• imagebuilder-imagerecipe-tagged

• imagebuilder-infrastructureconfiguration-tagged

• masuk-ssh-dinonaktifkan

• inspector-ec2-scan-enabled

• inspektor-ecr-scan-enabled

• inspector-lambda-code-scan-enabled

• inspector-lambda-standard-scan-enabled

• contoh-dalam-vpc

• internet-gateway-diotorisasi-vpc saja

• iotdevicedefender-custom-metric-tagged

• iotevents-alarm-model-tagged

• iotevents-detector-model-tagged

• iotevents-input-tagged

• iotsitewise-aset-model-tagged

• iotsitewise-dashboard-tagged

• dengan tag iotsitewise-gateway

• iotsitewise-portal-tagged

• iotsitewise-project-tagged

• iottwinmaker-komponen-tipe-tagged

• iottwinmaker-entity-tagged

• iottwinmaker-scene-tagged

• iottwinmaker-sync-job-tagged

• iottwinmaker-workspace-tagged

• dengan tag tugas iotwireless-fuota

• iotwireless-multicast-group-tagged

• iotwireless-service-profile-tagged

• iot-authorizer-token-signing-enabled

• template pekerjaan iot-tag

• iot-provisioning-template-description

• iot-penyediaan-template-jitp

• iot-provisioning-template-tagged

• diberi tag audit berjadwal iot

• ivs-channel-playback-otorisasi-diaktifkan

• ivs-channel-tag

• ivs-playback-key-pair-tagged

• ivs-recording-configuration-tagged

• kendra-index-tagged

• kinesisvideo-signalingchannel-tagged

• kinesisvideo-stream-tagged

• kinesis-firehose-delivery-stream-dienkripsi

• kinesis-stream-backup-retensi-cek

• kinesis-stream-terenkripsi

• kinesis-video-aliran-minimum-retensi data

• kms-cmk-tidak-menjadwalkan-untuk-penghapusan

• kms-kunci-kebijakan-tidak-akses publik

• kms-key-tagged

• lambda-concurrency-check

• lambda-dlq-periksa

• lambda-fungsi-aplikasi-log-level-check

• deskripsi fungsi lambda

• lambda-fungsi-log-format-json

• lambda-fungsi-publik-akses-dilarang

• lambda-fungsi-pengaturan-cek

• lambda-fungsi-sistem-log-pemeriksaan tingkat

• lambda-fungsi-xray diaktifkan

• lambda-dalam-vpc

• lambda-vpc-multi-az-cek

• lightsail-bucket-allow-public-overrides-disabled

• lightsail-bucket-object-versioning-enabled

• lightsail-bucket-tagged

• lightsail-certificate-tagged

• dengan tag lightsail-disk

• macie-auto-sensitif-data-penemuan-cek

• macie-status-check

• mariadb-menerbitkan-log-ke-cloudwatch-log

• mediapackage-packagingconfiguration-tagged

• mediatailor-playbackconfiguration-tagged

• memorydb-subnetgroup dengan tag

• mfa-diaktifkan-untuk-iam-konsol-akses

• mq-active-broker-ldap-otentikasi

• modus penerapan mq-aktif

• mq-active-single-instance-broker-penyimpanan-tipe-efs

• mq-automatic-minor-version-upgrade-enabled

• mq-auto-minor-version-upgrade-enabled

• mq-broker-umum-loging-diaktifkan

• mq-cloudwatch-audit-logging-diaktifkan

• mq-cloudwatch-audit-log-diaktifkan

• mq-tidak-akses publik

• modus penyebaran mq-kelinci

• msk-cluster-publik-akses-dinonaktifkan

• msk-cluster dengan tag

• msk-connect-connector-logging-enabled

• msk-enhanced-monitoring-enabled

• msk-in-cluster-node-require-tls

• msk-unrestricted-access-check

• multi-wilayah-cloud-trail-diaktifkan

• nacl-no-unrestricted-ssh-rdp

• neptunus-cluster-cadangan-retensi-cek

• neptune-cluster-cloudwatch-log-ekspor diaktifkan

• neptune-cluster-copy-tag-ke-snapshot diaktifkan

• neptunus-cluster-deletion-protection-enabled

• neptune-cluster-terenkripsi

• neptune-cluster-iam-database-otentikasi

• neptune-cluster-multi-az-diaktifkan

• neptune-cluster-snapshot-dienkripsi

• neptune-cluster-snapshot-iam-database-auth-enabled

• neptune-cluster-snapshot-publik-dilarang

• netfw-deletion-protection-enabled

• netfw-logging-diaktifkan

• netfw-multi-az-diaktifkan

• paket netfw-policy-default-tindakan-fragmen

• netfw-policy-default-tindakan-paket penuh

• netfw-policy-aturan-group-related

• netfw-stateless-rule-group-tidak-kosong

• netfw-subnet-change-protection-enabled

• nlb-cross-zone-load-balancing-enabled

• nlb-internal-skema-cek

• nlb-listener-tagged

• nlb-logging-diaktifkan

• nlb diberi tag

• tanpa batasan-rute-ke-igw

• opensearchserverless-koleksi-deskripsi

• opensearchserverless-collection-standbyreplicas-enabled

• opensearch-access-control-enabled

• opensearch-audit-logging-enabled

• opensearch-data-node-toleransi kesalahan

• opensearch-terenkripsi-di-istirahat

• opensearch-https-diperlukan

• opensearch-in-vpc-only

• opensearch-logs-to-cloudwatch

• opensearch-node-to-node-enkripsi-cek

• opensearch-primery-node-fault-toleransi

• opensearch-update-check

• paket panorama dengan tag

• kelinci-mq-versi yang didukung

• rds-aurora-mysql-audit-logging-diaktifkan

• rds-aurora-postgresql-logs-to-cloudwatch

• rds-automatic-minor-version-upgrade-enabled

• rds-cluster-auto-minor-version-upgrade-enable

• rds-cluster-cadangan-retensi-periksa

• rds-cluster-default-admin-check

• rds-cluster-deletion-protection-enabled

• rds-cluster-terenkripsi-di-istirahat

• rds-cluster-iam-otentikasi diaktifkan

• rds-cluster-multi-az-diaktifkan

• rds-db-security-group-tidak-diizinkan

• rds-enhanced-monitoring-enabled

• rds-event-subscription-tagged

• rds-global-cluster-aurora-mysql-versi yang didukung

• rds-instance-default-admin-check

• rds-instance-deletion-protection-enabled

• rds-instance-iam-otentikasi diaktifkan

• rds-instance-public-access-check

• rds-instance-subnet-igw-check

• rds-dalam-rencana cadangan

• rds-last-backup-recovery-point-dibuat

• rds-logging-diaktifkan

• rds-mariadb-instance-terenkripsi-dalam-transit

• rds-meets-restore-time-target

• dukungan rds-multi-az-

• rds-mysql-cluster-copy-tag-untuk-pemeriksaan snapshot

• rds-mysql-instance-terenkripsi-dalam-transit

• rds-option-group-tagged

• rds-pgsql-cluster-copy-tag-untuk-snapshot-check

• rds-postgresql-logs-ke-cloudwatch

• rds-postgres-instance-terenkripsi-dalam-transit

• rds-proxy-tls-enkripsi

• rds-sumber daya-dilindungi oleh rencana cadangan

• rds-snapshots-publik-dilarang

• rds-snapshot-dienkripsi

• rds-sqlserver-terenkripsi-dalam-transit

• rds-sql-server-log-ke-cloudwatch

• rds-penyimpanan-terenkripsi

• redshift-audit-logging-diaktifkan

• redshift-backup diaktifkan

• redshift-cluster-configuration-check

• redshift-cluster-kms-diaktifkan

• redshift-cluster-maintenance settings-check

• redshift-cluster-multi-az-diaktifkan

• redshift-cluster-parameter-group-tagged

• redshift-cluster-public-access-check

• redshift-cluster-subnet-grup-multi-az

• redshift-default-admin-check

• redshift-default-db-name-check

• redshift-enhanced-vpc-routing-enabled

• redshift-require-tls-ssl

• redshift-serverless-default-admin-check

• redshift-serverless-default-db-name-check

• redshift-serverless-namespace-cmk-enkripsi

• redshift-serverless-publish-logs-to-cloudwatch

• redshift-serverless-workgroup-terenkripsi-dalam-transit

• redshift-serverless-workgroup-no-public-access

• redshift-serverless-workgroup-route-dalam-vpc

• redshift-unrestricted-port-access

• tag yang dibutuhkan

• resiliencehub-app-tagged

• resiliencehub-resiliencypolicy-tagged

• lalu lintas masuk terbatas

• akun-akun-perangkat keras-mfa-diaktifkan

• akun-akun-mfa-diaktifkan

• route53-recovery-control-cluster-tagged

• route53-recovery-readiness-cell-tagged

• route53-recovery-readiness-readiness-check-tagged

• route53-recovery-readiness-recovery-group-tagged

• route53-recovery-readiness-resource-set-tagged

• route53-resolver-firewall-domain-list-tagged

• route53-resolver-firewall-rule-group-association-tagged

• route53-resolver-firewall-rule-group-tagged

• route53-resolver-resolver-endpoint diberi tag

• route53-resolver-resolver-rule-tagged

• rum-app-monitor-cloudwatch-logs-diaktifkan

• dengan tag rum-app-monitor-

• s3express-dir-bucket-lifecycle-aturan-check

• s3-access-point-in-vpc-only

• s3-access-point-publik-akses-blok

• s3-akun-tingkat-akses-publik-blok

• s3-akun-tingkat-akses-publik-blok-periodik

• s3-ember-acl-dilarang

• s3-ember-blacklist-tindakan-dilarang

• s3-bucket-lintas-wilayah-replikasi-diaktifkan

• s3-bucket-default-lock-enabled

• s3-ember-tingkat-akses-publik-dilarang

• s3-bucket-loging-diaktifkan

• s3-bucket-mfa-delete-enabled

• s3-bucket-policy-grantee-check

• s3-bucket-policy-tidak-lebih-permisif

• s3-ember-publik-baca-dilarang

• s3-ember-publik-tulis-dilarang

• s3-bucket-replikasi-diaktifkan

• s3-bucket-server-side-enkripsi diaktifkan

• s3-bucket-ssl-permintaan-saja

• s3-bucket-tagged

• s3-bucket-versioning-diaktifkan

• s3-default-enkripsi-kms

• s3-direktori-bucket-lifecycle-policy-aturan-check

• s3-acara-notifikasi-diaktifkan

• s3-last-backup-recovery-point-created

• s3-lifecycle-policy-check

• s3-bertemu-puluh-waktu-target

• s3-sumber daya-dalam-logis-udara-gapped-vault

• s3-sumber daya-dilindungi oleh rencana cadangan

• s3-versi-lifecycle-policy-check

• sagemaker-app-image-config-tagged

• sagemaker-data-kualitas-pekerjaan-terenkripsi-dalam-transit

• sagemaker-data-kualitas-pekerjaan-isolasi

• pembuat sagemer-domain-di-vpc

• dengan tag domain pembuat sagemer

• sagemaker-endpoint-konfigurasi-kms-kunci-dikonfigurasi

• sagemaker-endpoint-config-prod-instance-count

• sagemaker-featuregroup-deskripsi

• sagemaker-featuregroup-enkripsi-di-istirahat

• sagemaker-featuregroup-online-store-enkripsi

• sagemaker-fitur-grup-tagged

• sagemaker-gambar-deskripsi

• sagemaker-image-tagged

• sagemaker-inferenceexperiment-tagged

• sagemaker-model-bias-pekerjaan-enkripsi-dalam-transit

• pembuat sagemer-model-bias-pekerjaan-isolasi

• sagemaker-model-menjelaskan-pekerjaan-enkripsi-dalam-transit

• pembuat sagemer-model-di-vpc

• sagemaker-model-isolasi-diaktifkan

• sagemaker-model-multicontainer-private-registry

• sagemaker-model-private-registry-diperlukan

• sagemaker-model-kualitas-pekerjaan-terenkripsi-dalam-transit

• sagemaker-monitoring-jadwal-isolasi

• sagemaker-notebook-instance-dalam-vpc

• sagemaker-notebook-instance-kms-kunci-dikonfigurasi

• sagemaker-notebook-instance-platform-versi

• sagemaker-notebook-instance-root-access-check

• sagemaker-notebook-tidak-akses internet-langsung

• secretsmanager-rotation-enabled-check

• secretsmanager-schedduled-rotation-success-check

• secretsmanager-rahasia-periodik rotasi

• secretsmanager-rahasia-tidak digunakan

• secretsmanager-menggunakan-cmk

• Securityhub diaktifkan

• keamanan-akun-informasi-disediakan

• layanan-katalog-portfolio-tagged

• layanan-katalog-dibagi-dalam-organisasi

• layanan-vpc-endpoint-enabled

• ses-malware-scanning-diaktifkan

• ses-pengiriman-tls-diperlukan

• tanda-signingprofile-tagged

• sns-terenkripsi-kms

• sns-topik-pesan-pengiriman-notifikasi-diaktifkan

• sns-topik-tidak-akses publik

• sqs-antrian-dlq-cek

• sqs-antrian-tidak-akses publik

• sqs-antrean-kebijakan-pemeriksaan akses penuh

• ssm-automation-blok-berbagi publik

• ssm-otomasi-logging-diaktifkan

• ssm-dokumen-tidak-publik

• ssm-document-tagged

• stepfunctions-state-machine-tagged

• fungsi-langkah-state-mesin-logging-diaktifkan

• storagegateway-last-backup-recovery-point-created

• storagegateway-sumber daya-dalam-logis-udara-gapped-vault

• storagegateway-sumber daya-dilindungi oleh rencana cadangan

• subnet-auto-assign-public-ip-disabled

• transfer-perjanjian-deskripsi

• transfer-agreement-tagged

• transfer-sertifikat-deskripsi

• transfer-sertifikat-ditandai

• transfer-konektor-as2-enkripsi-algoritma-periksa

• transfer-konektor-as2-mdn-penandatanganan-algoritma-periksa

• transfer-konektor-sebagai-penandatanganan-algoritma-periksa

• transfer-konektor-logging-diaktifkan

• transfer-connector-tagged

• transfer-keluarga-server-no-ftp

• transfer-profile-tagged

• transfer-alur kerja-deskripsi

• transfer-workflow-tagged

• virtualmachine-last-backup-recovery-point-created

• virtualmachine-sumber daya-dalam-logis-udara-gapped-vault

• virtualmachine-sumber daya-dilindungi oleh rencana cadangan

• vpc-default-security-group-closed

• vpc-endpoint-diaktifkan

• vpc-flow-logs-diaktifkan

• vpc-network-acl-unused-check

• vpc-peering-dns-resolusi-cek

• vpc-sg-port terbuka saja-untuk-resmi

• pemeriksaan pembatasan vpc-sg-port-port

• vpc-vpn-2-terowongan

• wafv2-logging-diaktifkan

• wafv2-rulegroup-logging-diaktifkan

• wafv2-rulegroup-tidak-kosong

• wafv2-webacl-tidak-kosong

• waf-regional-rulegroup-tidak-kosong

• waf-regional-aturan-tidak-kosong

• waf-regional-webacl-tidak-kosong

• ruang kerja-koneksi-alias ditandai

• ruang kerja-root-volume-enkripsi-diaktifkan

• ruang kerja-user-volume-enkripsi-diaktifkan

• ruang kerja-ruang kerja-tagged