AWS controltower documentation change
Summary
Updated control metadata tables with new controls, added framework/objective information, regional identifiers, and documentation structure changes. Added multiple new controls including API_GW_CACHE_ENABLED_AND_ENCRYPTED, APPSYNC_ASSOCIATED_WITH_WAF, and others with security-related objectives.
Security assessment
Changes add documentation for security-focused controls (encryption, access restrictions, disaster recovery, MFA, etc.) but do not indicate remediation of a specific security vulnerability. The updates enhance security documentation by detailing existing controls.
Diff
diff --git a/controltower/latest/controlreference/control-metadata-tables.md b/controltower/latest/controlreference/control-metadata-tables.md index ebd50a822..bca24e300 100644 --- a//controltower/latest/controlreference/control-metadata-tables.md +++ b//controltower/latest/controlreference/control-metadata-tables.md @@ -5,2 +4,0 @@ -AWS-GR_AUDIT_BUCKET_DELETION_PROHIBITED AWS-GR_AUDIT_BUCKET_ENCRYPTION_ENABLED AWS-GR_AUDIT_BUCKET_LOGGING_ENABLED AWS-GR_AUDIT_BUCKET_POLICY_CHANGES_PROHIBITED AWS-GR_AUDIT_BUCKET_PUBLIC_READ_PROHIBITED AWS-GR_AUDIT_BUCKET_PUBLIC_WRITE_PROHIBITED AWS-GR_AUDIT_BUCKET_RETENTION_POLICY AWS-GR_AUTOSCALING_LAUNCH_CONFIG_PUBLIC_IP_DISABLED AWS-GR_CLOUDTRAIL_CHANGE_PROHIBITED AWS-GR_CLOUDTRAIL_CLOUDWATCH_LOGS_ENABLED AWS-GR_CLOUDTRAIL_ENABLED AWS-GR_CLOUDTRAIL_VALIDATION_ENABLED AWS-GR_CLOUDWATCH_EVENTS_CHANGE_PROHIBITED AWS-GR_CONFIG_AGGREGATION_AUTHORIZATION_POLICY AWS-GR_CONFIG_AGGREGATION_CHANGE_PROHIBITED AWS-GR_CONFIG_CHANGE_PROHIBITED AWS-GR_CONFIG_ENABLED AWS-GR_CONFIG_RULE_CHANGE_PROHIBITED AWS-GR_CT_AUDIT_BUCKET_ENCRYPTION_CHANGES_PROHIBITED AWS-GR_CT_AUDIT_BUCKET_LIFECYCLE_CONFIGURATION_CHANGES_PROHIBITED AWS-GR_CT_AUDIT_BUCKET_LOGGING_CONFIGURATION_CHANGES_PROHIBITED AWS-GR_CT_AUDIT_BUCKET_POLICY_CHANGES_PROHIBITED AWS-GR_DETECT_CLOUDTRAIL_ENABLED_ON_MEMBER_ACCOUNTS AWS-GR_DETECT_CLOUDTRAIL_ENABLED_ON_SHARED_ACCOUNTS AWS-GR_DISALLOW_CROSS_REGION_NETWORKING AWS-GR_DISALLOW_VPC_INTERNET_ACCESS AWS-GR_DISALLOW_VPN_CONNECTIONS AWS-GR_DMS_REPLICATION_NOT_PUBLIC AWS-GR_EBS_OPTIMIZED_INSTANCE AWS-GR_EBS_SNAPSHOT_PUBLIC_RESTORABLE_CHECK AWS-GR_EC2_INSTANCE_NO_PUBLIC_IP AWS-GR_EC2_VOLUME_INUSE_CHECK AWS-GR_EKS_ENDPOINT_NO_PUBLIC_ACCESS AWS-GR_ELASTICSEARCH_IN_VPC_ONLY AWS-GR_EMR_MASTER_NO_PUBLIC_IP AWS-GR_ENCRYPTED_VOLUMES AWS-GR_IAM_ROLE_CHANGE_PROHIBITED AWS-GR_IAM_USER_MFA_ENABLED AWS-GR_LAMBDA_CHANGE_PROHIBITED AWS-GR_LAMBDA_FUNCTION_PUBLIC_ACCESS_PROHIBITED AWS-GR_LOG_GROUP_POLICY AWS-GR_MFA_ENABLED_FOR_IAM_CONSOLE_ACCESS AWS-GR_NO_UNRESTRICTED_ROUTE_TO_IGW AWS-GR_RDS_INSTANCE_PUBLIC_ACCESS_CHECK AWS-GR_RDS_SNAPSHOTS_PUBLIC_PROHIBITED AWS-GR_RDS_STORAGE_ENCRYPTED AWS-GR_REDSHIFT_CLUSTER_PUBLIC_ACCESS_CHECK AWS-GR_REGION_DENY AWS-GR_RESTRICTED_COMMON_PORTS AWS-GR_RESTRICTED_SSH AWS-GR_RESTRICT_ROOT_USER AWS-GR_RESTRICT_ROOT_USER_ACCESS_KEYS AWS-GR_RESTRICT_S3_CROSS_REGION_REPLICATION AWS-GR_RESTRICT_S3_DELETE_WITHOUT_MFA AWS-GR_ROOT_ACCOUNT_MFA_ENABLED AWS-GR_S3_ACCOUNT_LEVEL_PUBLIC_ACCESS_BLOCKS_PERIODIC AWS-GR_S3_BUCKET_PUBLIC_READ_PROHIBITED AWS-GR_S3_BUCKET_PUBLIC_WRITE_PROHIBITED AWS-GR_S3_VERSIONING_ENABLED AWS-GR_SAGEMAKER_NOTEBOOK_NO_DIRECT_INTERNET_ACCESS AWS-GR_SNS_CHANGE_PROHIBITED AWS-GR_SNS_SUBSCRIPTION_CHANGE_PROHIBITED AWS-GR_SSM_DOCUMENT_NOT_PUBLIC AWS-GR_SUBNET_AUTO_ASSIGN_PUBLIC_IP_DISABLED CT.ACM.PR.1 CT.APIGATEWAY.PR.1 CT.APIGATEWAY.PR.2 CT.APIGATEWAY.PR.3 CT.APIGATEWAY.PR.4 CT.APIGATEWAY.PR.5 CT.APIGATEWAY.PR.6 CT.APPSYNC.PR.1 CT.APPSYNC.PR.2 CT.APPSYNC.PR.3 CT.APPSYNC.PR.4 CT.APPSYNC.PR.5 CT.APPSYNC.PV.1 CT.ATHENA.PR.2 CT.AUTOSCALING.PR.1 CT.AUTOSCALING.PR.10 CT.AUTOSCALING.PR.11 CT.AUTOSCALING.PR.2 CT.AUTOSCALING.PR.4 CT.AUTOSCALING.PR.5 CT.AUTOSCALING.PR.6 CT.AUTOSCALING.PR.8 CT.AUTOSCALING.PR.9 CT.CLOUDFORMATION.PR.1 CT.CLOUDFRONT.PR.1 CT.CLOUDFRONT.PR.10 CT.CLOUDFRONT.PR.11 CT.CLOUDFRONT.PR.2 CT.CLOUDFRONT.PR.3 CT.CLOUDFRONT.PR.4 CT.CLOUDFRONT.PR.5 CT.CLOUDFRONT.PR.6 CT.CLOUDFRONT.PR.7 CT.CLOUDFRONT.PR.8 CT.CLOUDFRONT.PR.9 CT.CLOUDTRAIL.PR.1 CT.CLOUDTRAIL.PR.2 CT.CLOUDTRAIL.PR.3 CT.CLOUDTRAIL.PR.4 CT.CLOUDWATCH.PR.1 CT.CLOUDWATCH.PR.2 CT.CLOUDWATCH.PR.3 CT.CLOUDWATCH.PR.4 CT.CODEBUILD.PR.1 CT.CODEBUILD.PR.2 CT.CODEBUILD.PR.3 CT.CODEBUILD.PR.5 CT.CODEBUILD.PR.6 CT.DAX.PR.1 CT.DAX.PR.2 CT.DAX.PR.3 CT.DMS.PR.1 CT.DMS.PR.2 CT.DOCUMENTDB.PR.1 CT.DOCUMENTDB.PR.2 CT.DYNAMODB.PR.1 CT.DYNAMODB.PR.2 CT.EC2.PR.1 CT.EC2.PR.10 CT.EC2.PR.11 CT.EC2.PR.12 CT.EC2.PR.13 CT.EC2.PR.14 CT.EC2.PR.15 CT.EC2.PR.16 CT.EC2.PR.17 CT.EC2.PR.18 CT.EC2.PR.19 CT.EC2.PR.2 CT.EC2.PR.20 CT.EC2.PR.3 CT.EC2.PR.4 CT.EC2.PR.5 CT.EC2.PR.6 CT.EC2.PR.7 CT.EC2.PR.8 CT.EC2.PR.9 CT.EC2.PV.1 CT.EC2.PV.2 CT.EC2.PV.3 CT.EC2.PV.4 CT.EC2.PV.5 CT.EC2.PV.6 CT.ECR.PR.1 CT.ECR.PR.2 CT.ECR.PR.3 CT.ECS.PR.1 CT.ECS.PR.10 CT.ECS.PR.11 CT.ECS.PR.12 CT.ECS.PR.2 CT.ECS.PR.3 CT.ECS.PR.4 CT.ECS.PR.5 CT.ECS.PR.6 CT.ECS.PR.7 CT.ECS.PR.8 CT.ECS.PR.9 CT.EKS.PR.1 CT.EKS.PR.2 CT.ELASTICACHE.PR.1 CT.ELASTICACHE.PR.2 CT.ELASTICACHE.PR.3 CT.ELASTICACHE.PR.4 CT.ELASTICACHE.PR.5 CT.ELASTICACHE.PR.6 CT.ELASTICACHE.PR.7 CT.ELASTICACHE.PR.8 CT.ELASTICBEANSTALK.PR.1 CT.ELASTICBEANSTALK.PR.2 CT.ELASTICBEANSTALK.PR.3 CT.ELASTICFILESYSYSTEM.PR.1 CT.ELASTICFILESYSYSTEM.PR.2 CT.ELASTICFILESYSYSTEM.PR.3 CT.ELASTICFILESYSYSTEM.PR.4 CT.ELASTICLOADBALANCING.PR.1 CT.ELASTICLOADBALANCING.PR.10 CT.ELASTICLOADBALANCING.PR.11 CT.ELASTICLOADBALANCING.PR.12 CT.ELASTICLOADBALANCING.PR.13 CT.ELASTICLOADBALANCING.PR.14 CT.ELASTICLOADBALANCING.PR.15 CT.ELASTICLOADBALANCING.PR.2 CT.ELASTICLOADBALANCING.PR.3 CT.ELASTICLOADBALANCING.PR.4 CT.ELASTICLOADBALANCING.PR.5 CT.ELASTICLOADBALANCING.PR.6 CT.ELASTICLOADBALANCING.PR.7 CT.ELASTICLOADBALANCING.PR.8 CT.ELASTICLOADBALANCING.PR.9 CT.EMR.PR.1 CT.EMR.PR.2 CT.EMR.PR.3 CT.EMR.PR.4 CT.GLUE.PR.1 CT.GUARDDUTY.PR.1 CT.IAM.PR.1 CT.IAM.PR.2 CT.IAM.PR.3 CT.IAM.PR.4 CT.IAM.PR.5 CT.KINESIS.PR.1 CT.KMS.PR.1 CT.KMS.PR.2 CT.KMS.PR.3 CT.KMS.PV.1 CT.KMS.PV.2 CT.KMS.PV.3 CT.KMS.PV.4 CT.KMS.PV.5 CT.KMS.PV.6 CT.LAMBDA.PR.2 CT.LAMBDA.PR.3 CT.LAMBDA.PR.4 CT.LAMBDA.PR.5 CT.LAMBDA.PR.6 CT.LAMBDA.PV.1 CT.LAMBDA.PV.2 CT.MQ.PR.1 CT.MQ.PR.2 CT.MSK.PR.1 CT.MSK.PR.2 CT.MULTISERVICE.PV.1 CT.NEPTUNE.PR.1 CT.NEPTUNE.PR.2 CT.NEPTUNE.PR.3 CT.NEPTUNE.PR.4 CT.NEPTUNE.PR.5 CT.NETWORK-FIREWALL.PR.1 CT.NETWORK-FIREWALL.PR.2 CT.NETWORK-FIREWALL.PR.3 CT.NETWORK-FIREWALL.PR.4 CT.NETWORK-FIREWALL.PR.5 CT.OPENSEARCH.PR.1 CT.OPENSEARCH.PR.10 CT.OPENSEARCH.PR.11 CT.OPENSEARCH.PR.12 CT.OPENSEARCH.PR.13 CT.OPENSEARCH.PR.14 CT.OPENSEARCH.PR.15 CT.OPENSEARCH.PR.16 CT.OPENSEARCH.PR.2 CT.OPENSEARCH.PR.3 CT.OPENSEARCH.PR.4 CT.OPENSEARCH.PR.5 CT.OPENSEARCH.PR.6 CT.OPENSEARCH.PR.7 CT.OPENSEARCH.PR.8 CT.OPENSEARCH.PR.9 CT.RDS.PR.1 CT.RDS.PR.10 CT.RDS.PR.11 CT.RDS.PR.12 CT.RDS.PR.13 CT.RDS.PR.14 CT.RDS.PR.15 CT.RDS.PR.16 CT.RDS.PR.17 CT.RDS.PR.18 CT.RDS.PR.19 CT.RDS.PR.2 CT.RDS.PR.20 CT.RDS.PR.21 CT.RDS.PR.22 CT.RDS.PR.23 CT.RDS.PR.24 CT.RDS.PR.25 CT.RDS.PR.26 CT.RDS.PR.27 CT.RDS.PR.28 CT.RDS.PR.29 CT.RDS.PR.3 CT.RDS.PR.30 CT.RDS.PR.4 CT.RDS.PR.5 CT.RDS.PR.6 CT.RDS.PR.7 CT.RDS.PR.8 CT.RDS.PR.9 CT.REDSHIFT.PR.1 CT.REDSHIFT.PR.2 CT.REDSHIFT.PR.3 CT.REDSHIFT.PR.4 CT.REDSHIFT.PR.5 CT.REDSHIFT.PR.6 CT.REDSHIFT.PR.7 CT.REDSHIFT.PR.8 CT.REDSHIFT.PR.9 CT.S3.PR.1 CT.S3.PR.10 CT.S3.PR.11 CT.S3.PR.12 CT.S3.PR.2 CT.S3.PR.3 CT.S3.PR.4 CT.S3.PR.5 CT.S3.PR.6 CT.S3.PR.8 CT.S3.PR.9 CT.SAGEMAKER.PR.1 CT.SAGEMAKER.PR.2 CT.SAGEMAKER.PR.3 CT.SQS.PR.1 CT.SQS.PR.2 CT.STEPFUNCTIONS.PR.1 CT.STEPFUNCTIONS.PR.2 CT.WAF-REGIONAL.PR.1 CT.WAF-REGIONAL.PR.2 CT.WAF.PR.1 CT.WAF.PR.2 CT.WAFV2.PR.1 CT.WAFV2.PR.2 SH.ACM.1 SH.ACM.2 SH.APIGateway.1 SH.APIGateway.2 SH.APIGateway.3 SH.APIGateway.4 SH.APIGateway.5 SH.APIGateway.8 SH.APIGateway.9 SH.Account.1 SH.AppSync.5 SH.AutoScaling.1 SH.AutoScaling.2 SH.AutoScaling.3 SH.AutoScaling.6 SH.AutoScaling.9 SH.Autoscaling.5 SH.CloudTrail.1 SH.CloudTrail.2 SH.CloudTrail.4 SH.CloudTrail.5 SH.CloudTrail.6 SH.CodeBuild.1 SH.CodeBuild.2 SH.CodeBuild.3 SH.CodeBuild.4 SH.DMS.1 SH.DMS.9 SH.DocumentDB.3 SH.DynamoDB.1 SH.DynamoDB.2 SH.DynamoDB.3 SH.EC2.1 SH.EC2.10 SH.EC2.15 SH.EC2.16 SH.EC2.17 SH.EC2.18 SH.EC2.19 SH.EC2.2 SH.EC2.20 SH.EC2.21 SH.EC2.22 SH.EC2.23 SH.EC2.25 SH.EC2.3 SH.EC2.4 SH.EC2.6 SH.EC2.7 SH.EC2.8 SH.EC2.9 SH.ECR.1 SH.ECR.2 SH.ECR.3 SH.ECS.1 SH.ECS.10 SH.ECS.12 SH.ECS.2 SH.ECS.3 SH.ECS.4 SH.ECS.5 SH.ECS.8 SH.EFS.1 SH.EFS.2 SH.EFS.3 SH.EFS.4 SH.EKS.1 SH.EKS.2 SH.ELB.10 SH.ELB.12 SH.ELB.13 SH.ELB.14 SH.ELB.2 SH.ELB.3 SH.ELB.4 SH.ELB.5 SH.ELB.6 SH.ELB.7 SH.ELB.8 SH.ELB.9 SH.ELBv2.1 SH.EMR.1 SH.ES.1 SH.ES.2 SH.ES.3 SH.ES.4 SH.ES.5 SH.ES.6 SH.ES.7 SH.ES.8 SH.ElastiCache.3 SH.ElastiCache.4 SH.ElastiCache.5 SH.ElastiCache.6 SH.ElasticBeanstalk.1 SH.ElasticBeanstalk.2 SH.EventBridge.3 SH.GuardDuty.1 SH.IAM.1 SH.IAM.2 SH.IAM.21 SH.IAM.3 SH.IAM.4 SH.IAM.5 SH.IAM.6 SH.IAM.7 SH.IAM.8 SH.KMS.1 SH.KMS.2 SH.KMS.3 SH.KMS.4 SH.Kinesis.1 SH.Lambda.1 SH.Lambda.2 SH.Lambda.3 SH.Lambda.5 SH.MQ.5 SH.MQ.6 SH.MSK.1 SH.Neptune.1 SH.Neptune.2 SH.Neptune.3 SH.Neptune.4 SH.Neptune.5 SH.Neptune.6 SH.Neptune.7 SH.Neptune.8 SH.NetworkFirewall.3 SH.NetworkFirewall.4 SH.NetworkFirewall.5 SH.NetworkFirewall.6 SH.Opensearch.1 SH.Opensearch.2 SH.Opensearch.3 SH.Opensearch.4 SH.Opensearch.5 SH.Opensearch.6 SH.Opensearch.7 SH.Opensearch.8 SH.RDS.1 SH.RDS.10 SH.RDS.11 SH.RDS.12 SH.RDS.13 SH.RDS.15 SH.RDS.17 SH.RDS.18 SH.RDS.19 SH.RDS.2 SH.RDS.20 SH.RDS.21 SH.RDS.22 SH.RDS.23 SH.RDS.25 SH.RDS.27 SH.RDS.3 SH.RDS.4 SH.RDS.5 SH.RDS.6 SH.RDS.8 SH.RDS.9 SH.Redshift.1 SH.Redshift.10 SH.Redshift.2 SH.Redshift.4 SH.Redshift.6 SH.Redshift.7 SH.Redshift.8 SH.Redshift.9 SH.S3.1 SH.S3.10 SH.S3.11 SH.S3.12 SH.S3.13 SH.S3.17 SH.S3.2 SH.S3.3 SH.S3.5 SH.S3.6 SH.S3.8 SH.S3.9 SH.SQS.1 SH.SSM.1 SH.SSM.2 SH.SSM.3 SH.SSM.4 SH.SageMaker.1 SH.SageMaker.2 SH.SageMaker.3 SH.SecretsManager.1 SH.SecretsManager.2 SH.SecretsManager.3 SH.SecretsManager.4 SH.WAF.10 SH.WAF.2 SH.WAF.3 SH.WAF.4 - @@ -9 +7,189 @@ AWS-GR_AUDIT_BUCKET_DELETION_PROHIBITED AWS-GR_AUDIT_BUCKET_ENCRYPTION_ENABLED -This section contains tables that show the metadata for controls. Each control has a unique API identifier for each Region in which AWS Control Tower is available. Each control also has a [global identifier](https://docs.aws.amazon.com/controltower/latest/controlreference/all-global-identifiers.html). When you are working with the control APIs, you can provide the identifier for the Region in which you are making the API call, or the global identifier. We recommend that you provide the global identifier in most cases. +This section contains tables that show the metadata for controls, including the **Framework** supported, the **Control objective** , and **Regional control identifiers**. Remember that older controls have a unique API identifier for each Region in which AWS Control Tower is available. Each control also has a [global identifier](https://docs.aws.amazon.com/controltower/latest/controlreference/all-global-identifiers.html). + +When you are working with the control APIs, you can provide the identifier for the Region in which you are making the API call, or the global identifier. We recommend that you provide the global identifier in most cases. To view global identifiers, see [All global identifiers for AWS Control Tower controls](https://docs.aws.amazon.com/controltower/latest/controlreference/all-global-identifiers.html). + +###### Note + +If the table shows **N/A** next to the **Region** name, the control does not have a regional identifier, only a global identifier. To view global identifiers, see [All global identifiers for AWS Control Tower controls](https://docs.aws.amazon.com/controltower/latest/controlreference/all-global-identifiers.html). + +Last updated April 11, 2025 + +### API_GW_CACHE_ENABLED_AND_ENCRYPTED + +**Control identifier** | **Framework** | **Control objective** | **Control API identifiers, by home Region** +---|---|---|--- +API_GW_CACHE_ENABLED_AND_ENCRYPTED | None | + + * Encrypt data at rest + +| + + * **Africa (Cape Town)** `N/A` + * **Asia Pacific (Hong Kong)** `N/A` + * **Asia Pacific (Tokyo)** `N/A` + * **Asia Pacific (Seoul)** `N/A` + * **Asia Pacific (Osaka)** `N/A` + * **Asia Pacific (Mumbai)** `N/A` + * **Asia Pacific (Hyderabad)** `N/A` + * **Asia Pacific (Singapore)** `N/A` + * **Asia Pacific (Sydney)** `N/A` + * **Asia Pacific (Jakarta)** `N/A` + * **Asia Pacific (Melbourne)** `N/A` + * **Asia Pacific (Malaysia)** `N/A` + * **Canada (Central)** `N/A` + * **Canada West (Calgary)** `N/A` + * **Europe (Frankfurt)** `N/A` + * **Europe (Zurich)** `N/A` + * **Europe (Stockholm)** `N/A` + * **Europe (Milan)** `N/A` + * **Europe (Spain)** `N/A` + * **Europe (Ireland)** `N/A` + * **Europe (London)** `N/A` + * **Europe (Paris)** `N/A` + * **Israel (Tel Aviv)** `N/A` + * **Middle East (UAE)** `N/A` + * **Middle East (Bahrain)** `N/A` + * **South America (São Paulo)** `N/A` + * **US East (N. Virginia)** `N/A` + * **US East (Ohio)** `N/A` + * **US West (N. California)** `N/A` + * **US West (Oregon)** `N/A` + + + +### APPSYNC_ASSOCIATED_WITH_WAF + +**Control identifier** | **Framework** | **Control objective** | **Control API identifiers, by home Region** +---|---|---|--- +APPSYNC_ASSOCIATED_WITH_WAF | None | + + * Limit network access + +| + + * **Africa (Cape Town)** `N/A` + * **Asia Pacific (Hong Kong)** `N/A` + * **Asia Pacific (Tokyo)** `N/A` + * **Asia Pacific (Seoul)** `N/A` + * **Asia Pacific (Osaka)** `N/A` + * **Asia Pacific (Mumbai)** `N/A` + * **Asia Pacific (Hyderabad)** `N/A` + * **Asia Pacific (Singapore)** `N/A` + * **Asia Pacific (Sydney)** `N/A` + * **Asia Pacific (Jakarta)** `N/A` + * **Asia Pacific (Melbourne)** `N/A` + * **Asia Pacific (Malaysia)** `N/A` + * **Canada (Central)** `N/A` + * **Canada West (Calgary)** `N/A` + * **Europe (Frankfurt)** `N/A` + * **Europe (Zurich)** `N/A` + * **Europe (Stockholm)** `N/A` + * **Europe (Milan)** `N/A` + * **Europe (Spain)** `N/A` + * **Europe (Ireland)** `N/A` + * **Europe (London)** `N/A` + * **Europe (Paris)** `N/A` + * **Israel (Tel Aviv)** `N/A` + * **Middle East (UAE)** `N/A` + * **Middle East (Bahrain)** `N/A` + * **South America (São Paulo)** `N/A` + * **US East (N. Virginia)** `N/A` + * **US East (Ohio)** `N/A` + * **US West (N. California)** `N/A` + * **US West (Oregon)** `N/A` + + + +### AURORA_LAST_BACKUP_RECOVERY_POINT_CREATED + +**Control identifier** | **Framework** | **Control objective** | **Control API identifiers, by home Region** +---|---|---|--- +AURORA_LAST_BACKUP_RECOVERY_POINT_CREATED | None | + + * Prepare for disaster recovery + +| + + * **Africa (Cape Town)** `N/A` + * **Asia Pacific (Hong Kong)** `N/A` + * **Asia Pacific (Tokyo)** `N/A` + * **Asia Pacific (Seoul)** `N/A` + * **Asia Pacific (Osaka)** `N/A` + * **Asia Pacific (Mumbai)** `N/A` + * **Asia Pacific (Hyderabad)** `N/A` + * **Asia Pacific (Singapore)** `N/A` + * **Asia Pacific (Sydney)** `N/A` + * **Asia Pacific (Jakarta)** `N/A` + * **Asia Pacific (Melbourne)** `N/A` + * **Asia Pacific (Malaysia)** `N/A` + * **Canada (Central)** `N/A` + * **Canada West (Calgary)** `N/A` + * **Europe (Frankfurt)** `N/A` + * **Europe (Zurich)** `N/A` + * **Europe (Stockholm)** `N/A` + * **Europe (Milan)** `N/A` + * **Europe (Spain)** `N/A` + * **Europe (Ireland)** `N/A` + * **Europe (London)** `N/A` + * **Europe (Paris)** `N/A` + * **Israel (Tel Aviv)** `N/A` + * **Middle East (UAE)** `N/A` + * **Middle East (Bahrain)** `N/A` + * **South America (São Paulo)** `N/A` + * **US East (N. Virginia)** `N/A` + * **US East (Ohio)** `N/A` + * **US West (N. California)** `N/A` + * **US West (Oregon)** `N/A` + + + +### AURORA_RESOURCES_PROTECTED_BY_BACKUP_PLAN + +**Control identifier** | **Framework** | **Control objective** | **Control API identifiers, by home Region** +---|---|---|--- +AURORA_RESOURCES_PROTECTED_BY_BACKUP_PLAN | None | + + * Prepare for disaster recovery + +| + + * **Africa (Cape Town)** `N/A` + * **Asia Pacific (Hong Kong)** `N/A` + * **Asia Pacific (Tokyo)** `N/A` + * **Asia Pacific (Seoul)** `N/A` + * **Asia Pacific (Osaka)** `N/A` + * **Asia Pacific (Mumbai)** `N/A` + * **Asia Pacific (Hyderabad)** `N/A` + * **Asia Pacific (Singapore)** `N/A` + * **Asia Pacific (Sydney)** `N/A` + * **Asia Pacific (Jakarta)** `N/A` + * **Asia Pacific (Melbourne)** `N/A` + * **Asia Pacific (Malaysia)** `N/A` + * **Canada (Central)** `N/A` + * **Canada West (Calgary)** `N/A` + * **Europe (Frankfurt)** `N/A` + * **Europe (Zurich)** `N/A` + * **Europe (Stockholm)** `N/A` + * **Europe (Milan)** `N/A` + * **Europe (Spain)** `N/A` + * **Europe (Ireland)** `N/A` + * **Europe (London)** `N/A` + * **Europe (Paris)** `N/A` + * **Israel (Tel Aviv)** `N/A` + * **Middle East (UAE)** `N/A` + * **Middle East (Bahrain)** `N/A` + * **South America (São Paulo)** `N/A` + * **US East (N. Virginia)** `N/A` + * **US East (Ohio)** `N/A` + * **US West (N. California)** `N/A` + * **US West (Oregon)** `N/A` + + + +### AUTOSCALING_CAPACITY_REBALANCING + +**Control identifier** | **Framework** | **Control objective** | **Control API identifiers, by home Region** +---|---|---|--- +AUTOSCALING_CAPACITY_REBALANCING | None | + + * Improve availability @@ -11 +197 @@ This section contains tables that show the metadata for controls. Each control h -Last updated August 30, 2024.