UNPKG

@pulumi/aws-compliance-policies

Version:

This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.

95 lines (94 loc) 3.15 kB
import { ResourceValidationPolicy } from "@pulumi/policy"; declare namespace DataCatalog { /** * Checks that Athena DataCatalogs have a description. * * @severity low * @frameworks none * @topics documentation * @link https://docs.aws.amazon.com/athena/latest/ug/understanding-tables-databases-and-the-data-catalog.html */ const missingDescription: ResourceValidationPolicy; } export { DataCatalog }; declare namespace Database { /** * Checks that Athena Databases storage uses a customer-managed-key. * * @severity low * @frameworks hitrust, iso27001, pcidss * @topics encryption, storage * @link https://docs.aws.amazon.com/athena/latest/ug/encryption.html */ const configureCustomerManagedKey: ResourceValidationPolicy; /** * Checks that Athena Databases storage is encrypted. * * @severity high * @frameworks hitrust, iso27001, pcidss * @topics encryption, storage * @link https://docs.aws.amazon.com/athena/latest/ug/encryption.html */ const disallowUnencryptedDatabase: ResourceValidationPolicy; /** * Checks that Athena Databases have a description. * * @severity low * @frameworks none * @topics documentation * @link https://docs.aws.amazon.com/athena/latest/ug/creating-databases.html */ const missingDescription: ResourceValidationPolicy; } export { Database }; declare namespace NamedQuery { /** * Checks that Athena NamedQueries have a description. * * @severity low * @frameworks none * @topics documentation * @link https://docs.aws.amazon.com/athena/latest/ug/saved-queries.html */ const missingDescription: ResourceValidationPolicy; } export { NamedQuery }; declare namespace Workgroup { /** * Checks that Athena Workgroups use a customer-managed-key. * * @severity low * @frameworks hitrust, iso27001, pcidss * @topics encryption, storage * @link https://docs.aws.amazon.com/athena/latest/ug/workgroups-procedure.html */ const configureCustomerManagedKey: ResourceValidationPolicy; /** * Checks that Athena Workgroups are encrypted. * * @severity high * @frameworks hitrust, iso27001, pcidss * @topics encryption, storage * @link https://docs.aws.amazon.com/athena/latest/ug/workgroups-procedure.html */ const disallowUnencryptedWorkgroup: ResourceValidationPolicy; /** * Checks that Athena Workgroups enforce their configuration to their clients. * * @severity high * @frameworks hitrust, iso27001, pcidss * @topics encryption, storage * @link https://docs.aws.amazon.com/athena/latest/ug/workgroups-procedure.html */ const enforceConfiguration: ResourceValidationPolicy; /** * Checks that Athena Workgroups have a description. * * @severity low * @frameworks none * @topics documentation * @link https://docs.aws.amazon.com/athena/latest/ug/workgroups-procedure.html */ const missingDescription: ResourceValidationPolicy; } export { Workgroup };