Question 1

Is backtrack_window enforced for ACSC Essential Eight?

Accepted Answer

Yes, This control checks whether AWS Aurora clusters have backtracking enabled. Backups help you to recover more quickly from a security incident. They also strengthen the resilience of your systems. Aurora backtracking reduces the time to recover a database to a point in time. It does not require a database restore to so.

Question 2

Is cloudwatch_log_group_kms_key_id enforced for ACSC Essential Eight?

Accepted Answer

Yes, To help protect sensitive data at rest, ensure encryption is enabled for your AWS CloudWatch Log Group.

Question 3

Is enabled_cloudwatch_logs_exports enforced for ACSC Essential Eight?

Accepted Answer

Yes, This control checks whether an Amazon Aurora MySQL DB cluster has audit logging enabled. The control fails if an Aurora MySQL DB cluster doesn't have audit logging enabled.

Question 4

Is iam_database_authentication_enabled enforced for ACSC Essential Eight?

Accepted Answer

Yes, Checks if an AWS RDS Cluster has AWS Identity and Access Management (IAM) authentication enabled. The rule is non-compliant if an RDS Cluster does not have IAM authentication enabled.

AWS RDS Aurora Terraform module

Terraform Module Source