SOC 2: Enforce infrastructure standards with Terraform policies

Description

System and Organization Controls (SOC) 2 is an auditing procedure that ensures service providers securely manage customer data. The SOC 2 framework is based on five trust service criteria: security, availability, processing integrity, confidentiality, and privacy.

Number of Guardrails

0

Relevant Guardrails

Disallow inbound open access

-->

Disallow inbound open access on Azure NSG

-->

Disallow inbound open access on GCP firewall rules

-->

Disallow public access on Azure Storage accounts

-->

Disallow public ACLs on S3 buckets

-->

Disallow public GCS buckets

-->

Disallow publicly accessible Azure SQL

-->

Disallow publicly accessible Cloud SQL

-->

Disallow publicly accessible RDS

-->

Enforce strong IAM password policy

-->

Require AWS Config to record all resources

-->

Require EBS encryption

-->

Require encryption on Azure managed disks

-->

Require encryption on GCE disks

-->

Require HTTPS on Azure Storage Accounts

-->

Require SSE on S3 buckets

-->

Require SSE on GCS buckets

-->

Require SSE on Azure Storage accounts

-->

Send CloudTrail logs to CloudWatch

-->

Import 0 Guardrails