feat(compliance): FedRAMP 20x Class C FRR + AWS checks (#12808)

This commit is contained in:
Pedro Martín
2026-09-14 16:35:05 +02:00
committed by GitHub
parent 1b228d590b
commit 3860cd3dce
45 changed files with 5100 additions and 8 deletions
+2
View File
@@ -138,6 +138,8 @@ config_aws = {
"organizations_enabled_regions": [],
"organizations_trusted_delegated_administrators": [],
"ecr_repository_vulnerability_minimum_severity": "MEDIUM",
"inspector2_max_days_since_last_scan": 3,
"inspector2_active_finding_max_age_days": 192,
"verify_premium_support_plans": True,
"threat_detection_privilege_escalation_threshold": 0.2,
"threat_detection_privilege_escalation_minutes": 1440,
+8
View File
@@ -139,6 +139,14 @@ aws:
# MEDIUM
ecr_repository_vulnerability_minimum_severity: "MEDIUM"
# AWS Inspector2
# aws.inspector2_coverage_recently_scanned
# Maximum days since Inspector2 last scanned an actively covered resource
inspector2_max_days_since_last_scan: 3
# aws.inspector2_active_findings_within_max_age
# Maximum days an Inspector2 finding can stay active since it was first observed
inspector2_active_finding_max_age_days: 192
# AWS Trusted Advisor
# aws.trustedadvisor_premium_support_plan_subscribed
verify_premium_support_plans: True