Update SecurityHub standards aka benchmarks

DataBiosphere / azul

Metadata indexer and query service used for AnVIL, HCA, LungMAP, and CGP

Apache License 2.0

5 stars 2 forks source link

Update SecurityHub standards aka benchmarks #6203

Open hannes-ucsc opened 2 months ago

hannes-ucsc commented 2 months ago

[ ] Disable AWS Foundational Security Best Practices v1.0.0
[ ] ~Disable CIS AWS Foundations Benchmark v1.2.0~
[ ] Update to CIS AWS Foundations Benchmark v3.0.0
[ ] ~Enable NIST Special Publication 800-53 Revision 5~
[ ] #6220

~If~ we need to keep the CIS standard, ~which I don't think we do~, we ~can~ will switch to version 3.0.0 which does not include the CloudWatch.2 control that requires that alarm.

Also, these links don't work anymore:

achave11-ucsc commented 2 months ago

Assignee to consider next steps.

hannes-ucsc commented 2 months ago

Assign when unblocked.

hannes-ucsc commented 1 week ago

As discussed in Questions on compliance controls meeting, Thursday, June 27 there is a change in plans: Upgrade to CIS AWS Foundations Benchmark v3.0.0, don't enable NIST Special Publication 800-53 Revision 5.

Description and title were updated accordingly.

dsotirho-ucsc commented 1 week ago

Assignee to update PR in light of the updated title & description.