PCI Data Security Standard V 3.2.1 for AWS

4min
Policy Pack based on the PCI DSS version 3.2.1 benchmark provided by the Payment Card Industry Data Security Standard (PCI DSS).
First Steps
Install Cloud Graph CLI.
Set up the AWS Provider for CG with the cg init aws command.
Add Policy Pack for AWS PCI DSS benchmark using cg policy add aws-pci-dss-3.2.1 command.
Execute the ruleset using the scan command cg scan aws.
Query the findings using the different options:
Querying findings by provider:
GraphQL
|
query {
  queryawsFindings {
    PCIFindings {
      id
      resourceId
      result
      rule {
        id
        severity
        title
        description
        audit
        rationale
        remediation
        references
      }
    }
  }
}
query {
  queryawsFindings {
    PCIFindings {
      id
      resourceId
      result
      rule {
        id
        severity
        title
        description
        audit
        rationale
        remediation
        references
      }
    }
  }
}
﻿
Querying findings by specific benchmark:
GraphQL
|
query {
  queryawsPCIFindings {
    id
    resourceId
    result
    rule {
      id
      severity
      title
      description
      audit
      rationale
      remediation
      references
    }
  }
}

query {
  queryawsPCIFindings {
    id
    resourceId
    result
    rule {
      id
      severity
      title
      description
      audit
      rationale
      remediation
      references
    }
  }
}
﻿
Querying findings by resource:
GraphQL
|
query {
  queryawsCodebuild {
    id
    arn
    accountId
    PCIFindings {
      id
      resourceId
      result
      rule {
        id
        severity
        title
        description
        audit
        rationale
        remediation
        references
      }
    }
  }
}
query {
  queryawsCodebuild {
    id
    arn
    accountId
    PCIFindings {
      id
      resourceId
      result
      rule {
        id
        severity
        title
        description
        audit
        rationale
        remediation
        references
      }
    }
  }
}
﻿
Available Ruleset
Please see the PCI README for a table of available rules.
Updated 03 Mar 2023
Did this page help you?
CIS AWS Foundations 1.4.0
NIST 800-53 Rev. 4 for AWS
TABLE OF CONTENTS