November 2022

IMPROVEMENT Compliance Rulesets Update - 12:00 UTC

Description: New AWS rules, AWS and K8S rules improvements. Three DFTs were fixed.

Removal of four rules:

D9.K8S.OPE.02 - Deprecated due to overlapping with another rule (D9.K8S.NET.32)

D9.K8S.OPE.04 - The rule was deprecated from CIS in version 1.4.1 and it's no longer relevant for the newer CIS versions

D9.AZU.NET.61 - Deprecated due to overlapping with another rule (D9.AZU.NET.19)

A complete list can be found here.

Case ID: IN-6004, DFT-2170, DFT-2221, DFT-2198
Known limitations: N/A 
Affected Components: COMPLIANCE RULESETS

fixed AWS SNS Topic And SQS encryption key bug - 12:40 UTC

Description: Fixed bug in SNS topic and SQS entities where the cryptoKey was null although it did exist.
Case ID: IN-6063
Known limitations: SNS topic and SQS are supporting KMS key from the same region only.
Affected Components: FETCHERS COMPLIANCE ENGINE PROTECTED ASSETS API

fixed AWS IamUser - 13:00 UTC

Description: Fixed D9.AWS.IAM.16 - Compliance check issue where the access keys for AWS IAM root account was not refreshed.
Case ID: DFT-2147
Known limitations: N/A
Affected Components: COMPLIANCE ENGINE