feat(compliance): FedRAMP 20x Class C FRR + AWS checks (#12808)

This commit is contained in:
Pedro Martín
2026-09-14 16:35:05 +02:00
committed by GitHub
parent 1b228d590b
commit 3860cd3dce
45 changed files with 5100 additions and 8 deletions
@@ -154,6 +154,8 @@ Only fields with a numeric range, a fixed value set, or a length cap are listed.
| `max_days_secret_unused` | `7..365` days | |
| `max_days_secret_unrotated` | `1..180` days | NIST IA-5: rotate quarterly; CIS ≤90 |
| `min_kinesis_stream_retention_hours` | `24..8760` h | 1 day .. 1 year |
| `inspector2_max_days_since_last_scan` | `1..90` days | |
| `inspector2_active_finding_max_age_days` | `1..365` days | Default `192` matches the FedRAMP 20x rule that marks vulnerabilities still open after 192 days as accepted |
| `shodan_api_key` | ≤512 chars | |
### Azure