feat(aws): add transfer_server_pqc_ssh_kex_enabled check (#11315)

Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
This commit is contained in:
Pedro Martín
2026-06-22 14:30:15 +01:00
committed by GitHub
co-authored by Hugo P.Brito
parent 30d737c7d7
commit 45cfe4e411
24 changed files with 357 additions and 3 deletions
+7
View File
@@ -438,6 +438,13 @@ mainConfig:
# Minimum number of Availability Zones that an ELBv2 must be in
elbv2_min_azs: 2
# AWS Post-Quantum SSH Key Exchange Configuration
# aws.transfer_server_pqc_ssh_kex_enabled
transfer_pqc_ssh_allowed_policies:
- "TransferSecurityPolicy-2025-03"
- "TransferSecurityPolicy-FIPS-2025-03"
- "TransferSecurityPolicy-AS2Restricted-2025-07"
# AWS Secrets Configuration
# Patterns to ignore in the secrets checks