feat: Included 6.x rules for aws nist 800-53

cloudgraphdev · Apr 21, 2022 · b51f652 · b51f652
1 parent 03b9889
commit b51f652
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/src/aws/cis-1.2.0/rules/aws-cis-1.2.0-2.4.ts b/src/aws/cis-1.2.0/rules/aws-cis-1.2.0-2.4.ts
@@ -75,10 +75,10 @@ export default {
   resource: 'queryawsCloudtrail[*]',
   severity: 'medium',
   conditions: {
-    or: [
+    and: [
       {
         path: '@.cloudWatchLogsLogGroupArn',
-        equal: null,
+        notEqual: null,
       },
       {
         value: {

diff --git a/src/aws/cis-1.2.0/tests/aws-cis-1.2.0-2.x.test.ts b/src/aws/cis-1.2.0/tests/aws-cis-1.2.0-2.x.test.ts
@@ -360,7 +360,7 @@ describe('CIS Amazon Web Services Foundations: 1.2.0', () => {
 
       expect(processedRule.result).toBe(Result.FAIL)
     })
-    test('Should pass when a trail does not have cloudwatch logs integrated', async () => {
+    test('Should fail when a trail does not have cloudwatch logs integrated', async () => {
       const data = {
         queryawsCloudtrail: [
           {
@@ -375,7 +375,7 @@ describe('CIS Amazon Web Services Foundations: 1.2.0', () => {
         { ...data } as any
       )
 
-      expect(processedRule.result).toBe(Result.PASS)
+      expect(processedRule.result).toBe(Result.FAIL)
     })
   })
 

diff --git a/src/aws/nist-800-53-rev4/rules/aws-nist-800-53-rev4-6.7.ts b/src/aws/nist-800-53-rev4/rules/aws-nist-800-53-rev4-6.7.ts
@@ -76,10 +76,10 @@ export default {
   resource: 'queryawsCloudtrail[*]',
   severity: 'medium',
   conditions: {
-    or: [
+    and: [
       {
         path: '@.cloudWatchLogsLogGroupArn',
-        equal: null,
+        notEqual: null,
       },
       {
         value: {