Question 1

Is backtrack_window enforced for NIS2 Directive (EU 2022/2555)?

Accepted Answer

Yes, This control checks whether AWS Aurora clusters have backtracking enabled. Backups help you to recover more quickly from a security incident. They also strengthen the resilience of your systems. Aurora backtracking reduces the time to recover a database to a point in time. It does not require a database restore to so.

Question 2

Is cloudwatch_log_group_retention_in_days enforced for NIS2 Directive (EU 2022/2555)?

Accepted Answer

Yes, Ensure a minimum duration of event log data is retained for your log groups to help with troubleshooting and forensics investigations.

Question 3

Is cluster_monitoring_interval enforced for NIS2 Directive (EU 2022/2555)?

Accepted Answer

Yes, Enable AWS Relational Database Service (AWS RDS) to help monitor AWS RDS availability. This provides detailed visibility into the health of your AWS RDS database instances.

Question 4

Is copy_tags_to_snapshot enforced for NIS2 Directive (EU 2022/2555)?

Accepted Answer

Yes, This control checks whether RDS DB clusters are configured to copy all tags to snapshots when the snapshots are created.

Question 5

Is enabled_cloudwatch_logs_exports enforced for NIS2 Directive (EU 2022/2555)?

Accepted Answer

Yes, This control checks whether an Amazon Aurora PostgreSQL DB cluster is configured to publish logs to Amazon CloudWatch Logs. The control fails if the Aurora PostgreSQL DB cluster isn't configured to publish PostgreSQL logs to CloudWatch Logs.

Question 6

Is iam_database_authentication_enabled enforced for NIS2 Directive (EU 2022/2555)?

Accepted Answer

Yes, Checks if an AWS RDS Cluster has AWS Identity and Access Management (IAM) authentication enabled. The rule is non-compliant if an RDS Cluster does not have IAM authentication enabled.

AWS RDS Aurora Terraform module

Terraform Module Source