Revision 1.3

Functional Update

• 1.6 Ensure hardware MFA is enabled for the 'root user' account - root user account
• 4.10 Ensure a log metric filter and alarm exist for security group changes - 'metric filter exists'
• 4.11 Ensure a log metric filter and alarm exist for changes to Network Access Control Lists (NACL) - 'metric filter exists'
• 4.6 Ensure a log metric filter and alarm exist for AWS Management Console authentication failures - 'metric filter exists'
• 4.7 Ensure a log metric filter and alarm exist for disabling or scheduled deletion of customer created CMKs - 'metric filter exists'
• 4.9 Ensure a log metric filter and alarm exist for AWS Config configuration changes - 'metric filter exists'