Is cloudwatch_log_group_retention_in_days enforced for NIS2 Directive (EU 2022/2555)?

Yes, Ensure a minimum duration of event log data is retained for your log groups to help with troubleshooting and forensics investigations.

Is enabled_log_types enforced for NIS2 Directive (EU 2022/2555)?

Yes, AWS EKS clusters should have control plane audit logging enabled. These logs make it easy to secure and run clusters.

Upstream version 21.24.1

5 controls from NIS2 Directive (EU 2022/2555) requirements

nis2.compliance.tf/terraform-aws-modules/eks/aws

CloudWatch log groups should have retention period of at least 365 days

cloudwatch_log_group_retention_period_365

Framework requirement

EC2 launch templates should use Instance Metadata Service Version 2 (IMDSv2)

ec2_launch_template_default_version_uses_imdsv2

Framework requirement

EC2 launch templates should not assign public IPs to network interfaces

ec2_launch_template_not_publicly_accessible

Framework requirement

EKS clusters should have control plane audit logging enabled

eks_cluster_control_plane_audit_logging_enabled

Framework requirement

VPC security groups should restrict ingress from 0.0.0.0/0 or ::/0 to cassandra ports 7199 or 9160 or 8888

vpc_security_group_allows_ingress_to_cassandra_ports

Framework requirement