Question 1

Is lifecycle_rule enforced for NIS2 Directive (EU 2022/2555)?

Accepted Answer

Yes, This control checks if AWS Simple Storage Service (AWS S3) version enabled buckets have lifecycle policy configured. This rule fails if AWS S3 lifecycle policy is not enabled.

Question 2

Is logging enforced for NIS2 Directive (EU 2022/2555)?

Accepted Answer

Yes, AWS Simple Storage Service (AWS S3) server access logging provides a method to monitor the network for potential cybersecurity events.

Question 3

Is server_side_encryption_configuration enforced for NIS2 Directive (EU 2022/2555)?

Accepted Answer

Yes, To help protect data at rest, ensure encryption is enabled for your AWS Simple Storage Service (AWS S3) buckets.

Question 4

Is versioning enforced for NIS2 Directive (EU 2022/2555)?

Accepted Answer

Yes, Once MFA Delete is enabled on your sensitive and classified S3 bucket it requires the user to have two forms of authentication.

AWS S3 bucket Terraform module

Terraform Module Source