Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New policy packs 0325 #928

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open

New policy packs 0325 #928

wants to merge 2 commits into from

Conversation

dboeke
Copy link
Contributor

@dboeke dboeke commented Mar 13, 2025

No description provided.

dboeke added 2 commits March 13, 2025 08:02
This commit adds the folder structure and basic files for the new policy packs
listed in new-policy-packs-0325.csv. Each policy pack includes:
- README.md with appropriate documentation
- main.tf with policy pack definition
- providers.tf with Terraform provider configuration
- Empty policies.tf file (to be populated in a future commit)

The policy pack names follow the established naming conventions in the repository.
This commit adds policy definitions for the following policy packs:
- AWS EBS volumes have recent snapshots (using AWS Backup)
- AWS IAM roles are not inactive for more than 90 days
- AWS CloudWatch Log Groups have retention period specified
- AWS S3 bucket policies deny HTTP requests
- AWS S3 buckets have replication enabled
- AWS Secrets Manager has automatic rotation enabled
- AWS Secrets Manager unused secrets are removed after 90 days

Each policy pack includes the appropriate policy types and settings
to implement the required controls.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant