Removing retired security hub controls (#1193)

ColinL2021 · web-flow · commit dfb10b11ebc8 · 2023-11-15T10:20:34.000-05:00
diff --git a/reference-artifacts/SAMPLE_CONFIGS/config.SSM-Patching-example.json b/reference-artifacts/SAMPLE_CONFIGS/config.SSM-Patching-example.json
@@ -207,16 +207,14 @@
           "name": "AWS Foundational Security Best Practices v1.0.0",
           "controls-to-disable": [
             "IAM.1",
-            "EC2.10",
-            "Lambda.4"
+            "EC2.10"
           ]
         },
         {
           "name": "PCI DSS v3.2.1",
           "controls-to-disable": [
             "PCI.IAM.3",
             "PCI.S3.3",
-            "PCI.EC2.3",
             "PCI.Lambda.2"
           ]
         },
diff --git a/reference-artifacts/SAMPLE_CONFIGS/config.example-oldIP.json b/reference-artifacts/SAMPLE_CONFIGS/config.example-oldIP.json
@@ -204,16 +204,14 @@
           "name": "AWS Foundational Security Best Practices v1.0.0",
           "controls-to-disable": [
             "IAM.1",
-            "EC2.10",
-            "Lambda.4"
+            "EC2.10"
           ]
         },
         {
           "name": "PCI DSS v3.2.1",
           "controls-to-disable": [
             "PCI.IAM.3",
             "PCI.S3.3",
-            "PCI.EC2.3",
             "PCI.Lambda.2"
           ]
         },
diff --git a/reference-artifacts/SAMPLE_CONFIGS/config.example.json b/reference-artifacts/SAMPLE_CONFIGS/config.example.json
@@ -207,16 +207,14 @@
           "name": "AWS Foundational Security Best Practices v1.0.0",
           "controls-to-disable": [
             "IAM.1",
-            "EC2.10",
-            "Lambda.4"
+            "EC2.10"
           ]
         },
         {
           "name": "PCI DSS v3.2.1",
           "controls-to-disable": [
             "PCI.IAM.3",
             "PCI.S3.3",
-            "PCI.EC2.3",
             "PCI.Lambda.2"
           ]
         },
diff --git a/reference-artifacts/SAMPLE_CONFIGS/config.lite-CTNFW-example.json b/reference-artifacts/SAMPLE_CONFIGS/config.lite-CTNFW-example.json
@@ -219,16 +219,14 @@
           "name": "AWS Foundational Security Best Practices v1.0.0",
           "controls-to-disable": [
             "IAM.1",
-            "EC2.10",
-            "Lambda.4"
+            "EC2.10"
           ]
         },
         {
           "name": "PCI DSS v3.2.1",
           "controls-to-disable": [
             "PCI.IAM.3",
             "PCI.S3.3",
-            "PCI.EC2.3",
             "PCI.Lambda.2"
           ]
         },
diff --git a/reference-artifacts/SAMPLE_CONFIGS/config.lite-GWLB-example.json b/reference-artifacts/SAMPLE_CONFIGS/config.lite-GWLB-example.json
@@ -207,16 +207,14 @@
           "name": "AWS Foundational Security Best Practices v1.0.0",
           "controls-to-disable": [
             "IAM.1",
-            "EC2.10",
-            "Lambda.4"
+            "EC2.10"
           ]
         },
         {
           "name": "PCI DSS v3.2.1",
           "controls-to-disable": [
             "PCI.IAM.3",
             "PCI.S3.3",
-            "PCI.EC2.3",
             "PCI.Lambda.2"
           ]
         },
diff --git a/reference-artifacts/SAMPLE_CONFIGS/config.lite-NFW-example.json b/reference-artifacts/SAMPLE_CONFIGS/config.lite-NFW-example.json
@@ -202,16 +202,14 @@
           "name": "AWS Foundational Security Best Practices v1.0.0",
           "controls-to-disable": [
             "IAM.1",
-            "EC2.10",
-            "Lambda.4"
+            "EC2.10"
           ]
         },
         {
           "name": "PCI DSS v3.2.1",
           "controls-to-disable": [
             "PCI.IAM.3",
             "PCI.S3.3",
-            "PCI.EC2.3",
             "PCI.Lambda.2"
           ]
         },
diff --git a/reference-artifacts/SAMPLE_CONFIGS/config.lite-VPN-example-oldIP.json b/reference-artifacts/SAMPLE_CONFIGS/config.lite-VPN-example-oldIP.json
@@ -204,16 +204,14 @@
           "name": "AWS Foundational Security Best Practices v1.0.0",
           "controls-to-disable": [
             "IAM.1",
-            "EC2.10",
-            "Lambda.4"
+            "EC2.10"
           ]
         },
         {
           "name": "PCI DSS v3.2.1",
           "controls-to-disable": [
             "PCI.IAM.3",
             "PCI.S3.3",
-            "PCI.EC2.3",
             "PCI.Lambda.2"
           ]
         },
diff --git a/reference-artifacts/SAMPLE_CONFIGS/config.lite-VPN-example.json b/reference-artifacts/SAMPLE_CONFIGS/config.lite-VPN-example.json
@@ -207,16 +207,14 @@
           "name": "AWS Foundational Security Best Practices v1.0.0",
           "controls-to-disable": [
             "IAM.1",
-            "EC2.10",
-            "Lambda.4"
+            "EC2.10"
           ]
         },
         {
           "name": "PCI DSS v3.2.1",
           "controls-to-disable": [
             "PCI.IAM.3",
             "PCI.S3.3",
-            "PCI.EC2.3",
             "PCI.Lambda.2"
           ]
         },
diff --git a/reference-artifacts/SAMPLE_CONFIGS/config.multi-region-example.json b/reference-artifacts/SAMPLE_CONFIGS/config.multi-region-example.json
@@ -211,16 +211,14 @@
           "name": "AWS Foundational Security Best Practices v1.0.0",
           "controls-to-disable": [
             "IAM.1",
-            "EC2.10",
-            "Lambda.4"
+            "EC2.10"
           ]
         },
         {
           "name": "PCI DSS v3.2.1",
           "controls-to-disable": [
             "PCI.IAM.3",
             "PCI.S3.3",
-            "PCI.EC2.3",
             "PCI.Lambda.2"
           ]
         },
diff --git a/reference-artifacts/SAMPLE_CONFIGS/config.test-example.json b/reference-artifacts/SAMPLE_CONFIGS/config.test-example.json
@@ -267,16 +267,14 @@
           "name": "AWS Foundational Security Best Practices v1.0.0",
           "controls-to-disable": [
             "IAM.1",
-            "EC2.10",
-            "Lambda.4"
+            "EC2.10"
           ]
         },
         {
           "name": "PCI DSS v3.2.1",
           "controls-to-disable": [
             "PCI.IAM.3",
             "PCI.S3.3",
-            "PCI.EC2.3",
             "PCI.Lambda.2"
           ]
         },
diff --git a/reference-artifacts/SAMPLE_CONFIGS/config.ultralite-CT-example.json b/reference-artifacts/SAMPLE_CONFIGS/config.ultralite-CT-example.json
@@ -151,7 +151,7 @@
       "standards": [
         {
           "name": "AWS Foundational Security Best Practices v1.0.0",
-          "controls-to-disable": ["IAM.1", "EC2.10", "Lambda.4"]
+          "controls-to-disable": ["IAM.1", "EC2.10"]
         },
         {
           "name": "CIS AWS Foundations Benchmark v1.2.0",
diff --git a/reference-artifacts/SAMPLE_CONFIGS/config.ultralite-example.json b/reference-artifacts/SAMPLE_CONFIGS/config.ultralite-example.json
@@ -150,7 +150,7 @@
       "standards": [
         {
           "name": "AWS Foundational Security Best Practices v1.0.0",
-          "controls-to-disable": ["IAM.1", "EC2.10", "Lambda.4"]
+          "controls-to-disable": ["IAM.1", "EC2.10"]
         },
         {
           "name": "CIS AWS Foundations Benchmark v1.2.0",

Original file line number	Diff line number	Diff line change
`@@ -207,16 +207,14 @@`
`207`	`207`	`"name": "AWS Foundational Security Best Practices v1.0.0",`
`208`	`208`	`"controls-to-disable": [`
`209`	`209`	`"IAM.1",`
`210`		`- "EC2.10",`
`211`		`- "Lambda.4"`
	`210`	`+ "EC2.10"`
`212`	`211`	`]`
`213`	`212`	`},`
`214`	`213`	`{`
`215`	`214`	`"name": "PCI DSS v3.2.1",`
`216`	`215`	`"controls-to-disable": [`
`217`	`216`	`"PCI.IAM.3",`
`218`	`217`	`"PCI.S3.3",`
`219`		`- "PCI.EC2.3",`
`220`	`218`	`"PCI.Lambda.2"`
`221`	`219`	`]`
`222`	`220`	`},`
Original file line number	Diff line number	Diff line change
`@@ -204,16 +204,14 @@`
`204`	`204`	`"name": "AWS Foundational Security Best Practices v1.0.0",`
`205`	`205`	`"controls-to-disable": [`
`206`	`206`	`"IAM.1",`
`207`		`- "EC2.10",`
`208`		`- "Lambda.4"`
	`207`	`+ "EC2.10"`
`209`	`208`	`]`
`210`	`209`	`},`
`211`	`210`	`{`
`212`	`211`	`"name": "PCI DSS v3.2.1",`
`213`	`212`	`"controls-to-disable": [`
`214`	`213`	`"PCI.IAM.3",`
`215`	`214`	`"PCI.S3.3",`
`216`		`- "PCI.EC2.3",`
`217`	`215`	`"PCI.Lambda.2"`
`218`	`216`	`]`
`219`	`217`	`},`
Original file line number	Diff line number	Diff line change
`@@ -219,16 +219,14 @@`
`219`	`219`	`"name": "AWS Foundational Security Best Practices v1.0.0",`
`220`	`220`	`"controls-to-disable": [`
`221`	`221`	`"IAM.1",`
`222`		`- "EC2.10",`
`223`		`- "Lambda.4"`
	`222`	`+ "EC2.10"`
`224`	`223`	`]`
`225`	`224`	`},`
`226`	`225`	`{`
`227`	`226`	`"name": "PCI DSS v3.2.1",`
`228`	`227`	`"controls-to-disable": [`
`229`	`228`	`"PCI.IAM.3",`
`230`	`229`	`"PCI.S3.3",`
`231`		`- "PCI.EC2.3",`
`232`	`230`	`"PCI.Lambda.2"`
`233`	`231`	`]`
`234`	`232`	`},`
Original file line number	Diff line number	Diff line change
`@@ -202,16 +202,14 @@`
`202`	`202`	`"name": "AWS Foundational Security Best Practices v1.0.0",`
`203`	`203`	`"controls-to-disable": [`
`204`	`204`	`"IAM.1",`
`205`		`- "EC2.10",`
`206`		`- "Lambda.4"`
	`205`	`+ "EC2.10"`
`207`	`206`	`]`
`208`	`207`	`},`
`209`	`208`	`{`
`210`	`209`	`"name": "PCI DSS v3.2.1",`
`211`	`210`	`"controls-to-disable": [`
`212`	`211`	`"PCI.IAM.3",`
`213`	`212`	`"PCI.S3.3",`
`214`		`- "PCI.EC2.3",`
`215`	`213`	`"PCI.Lambda.2"`
`216`	`214`	`]`
`217`	`215`	`},`
Original file line number	Diff line number	Diff line change
`@@ -211,16 +211,14 @@`
`211`	`211`	`"name": "AWS Foundational Security Best Practices v1.0.0",`
`212`	`212`	`"controls-to-disable": [`
`213`	`213`	`"IAM.1",`
`214`		`- "EC2.10",`
`215`		`- "Lambda.4"`
	`214`	`+ "EC2.10"`
`216`	`215`	`]`
`217`	`216`	`},`
`218`	`217`	`{`
`219`	`218`	`"name": "PCI DSS v3.2.1",`
`220`	`219`	`"controls-to-disable": [`
`221`	`220`	`"PCI.IAM.3",`
`222`	`221`	`"PCI.S3.3",`
`223`		`- "PCI.EC2.3",`
`224`	`222`	`"PCI.Lambda.2"`
`225`	`223`	`]`
`226`	`224`	`},`
Original file line number	Diff line number	Diff line change
`@@ -267,16 +267,14 @@`
`267`	`267`	`"name": "AWS Foundational Security Best Practices v1.0.0",`
`268`	`268`	`"controls-to-disable": [`
`269`	`269`	`"IAM.1",`
`270`		`- "EC2.10",`
`271`		`- "Lambda.4"`
	`270`	`+ "EC2.10"`
`272`	`271`	`]`
`273`	`272`	`},`
`274`	`273`	`{`
`275`	`274`	`"name": "PCI DSS v3.2.1",`
`276`	`275`	`"controls-to-disable": [`
`277`	`276`	`"PCI.IAM.3",`
`278`	`277`	`"PCI.S3.3",`
`279`		`- "PCI.EC2.3",`
`280`	`278`	`"PCI.Lambda.2"`
`281`	`279`	`]`
`282`	`280`	`},`