AWS EKS Terraform module
Upstream version 21.24.1
10 controls from ISO/IEC 27001:2022 requirements
Terraform Module Source
iso27001.compliance.tf/terraform-aws-modules/eks/awsCloudWatch log groups should have retention period of at least 365 days
cloudwatch_log_group_retention_period_365
Framework requirement
EC2 launch templates should use Instance Metadata Service Version 2 (IMDSv2)
ec2_launch_template_default_version_uses_imdsv2
Framework requirement
EC2 launch templates should not assign public IPs to network interfaces
ec2_launch_template_not_publicly_accessible
Framework requirement
EKS clusters should have control plane audit logging enabled
eks_cluster_control_plane_audit_logging_enabled
Framework requirement
EKS clusters endpoint public access should be restricted
eks_cluster_endpoint_public_access_restricted
Framework requirement
EKS clusters should be configured to have kubernetes secrets encrypted using KMS
eks_cluster_secrets_encrypted
Framework requirement
Log groups should have encryption at rest enabled
log_group_encryption_at_rest_enabled
Framework requirement
SQS queues should have encryption at rest enabled
sqs_queue_encrypted_at_rest
Framework requirement
SQS queues should be encrypted with KMS CMK
sqs_queue_encrypted_with_kms_cmk
Framework requirement
VPC security groups should restrict ingress from 0.0.0.0/0 or ::/0 to cassandra ports 7199 or 9160 or 8888
vpc_security_group_allows_ingress_to_cassandra_ports
Framework requirement