From 7059af49f49bffe47867cbb70e8c97e94df5a01d Mon Sep 17 00:00:00 2001 From: Bruce Hoff Date: Thu, 19 Dec 2024 12:44:32 -0800 Subject: [PATCH] IT-4077 Add suppression rules for cis-aws-foundations-benchmark/v/1.4.0 (#1308) * IT-4077 add suppresion rules for v1.4 of cis-aws-foundations-benchmark --- org-formation/075-security-hub/security-hub-suppress-infra.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/org-formation/075-security-hub/security-hub-suppress-infra.yaml b/org-formation/075-security-hub/security-hub-suppress-infra.yaml index 586adb3f..cd2026dc 100644 --- a/org-formation/075-security-hub/security-hub-suppress-infra.yaml +++ b/org-formation/075-security-hub/security-hub-suppress-infra.yaml @@ -364,8 +364,10 @@ Resources: findings: GeneratorId: - 'arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0/rule/4.3' + - 'cis-aws-foundations-benchmark/v/1.4.0/5.3' # same as v/1.2.0/rule/4.3 - 'aws-foundational-security-best-practices/v/1.0.0/EC2.2' - 'arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0/rule/1.14' + - 'cis-aws-foundations-benchmark/v/1.4.0/1.6' # same as v/1.2.0/rule/1.14 - 'aws-foundational-security-best-practices/v/1.0.0/IAM.6' - 'arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0/rule/2.7' - 'cis-aws-foundations-benchmark/v/1.4.0/3.7'