@kumo-by-theodo/guardian v2.0.1

If the region is not configured for that profile, make sure to specify it using the -r flag in the command.

AWS Lambda:

• Lambda: Use ARM64 architecture: checks that you're using ARM64 architectures for your Lambda functions.
• Lambda: No shared IAM roles: checks that each one of your Lambda functions has its own IAM role.
• Lambda: Limited amount of versions: checks that you do not store all previous deployment versions for your Lambda functions.
• Lambda: Specify failure destination to async functions: checks that each one of your async Lambda functions has a failure destination.
• Lambda: No identical code: checks that each one of your Lambda functions has different code.
• Lambda: Light bundle: checks that each one of your Lambda functions' bundles is reasonably small.
• Lambda: No default memory: checks that you have consciously configured your Lambda functions' memory size.
• Lambda: Under maximum memory: checks that each one of your Lambda functions' memory size is reasonably small.
• Lambda: No maximum timeout: checks that your Lambda functions' timeout is not set at the maximum available.

• S3: Use intelligent tiering: checks that each one of S3 buckets has intelligent tiering enabled.
• S3: Server-side encryption enabled: checks that a server-side encryption soution is enabled on each S3 bucket.

• Cognito: Sign-in case insensitivity: checks that your Cognito user pool is insensitive to user name case.

• CloudWatch Log Groups: Defined logs retention duration: checks that each of your Log Groups has a defined log retention duration.

• EventBridge: Specified dead letter queue: checks that each Event Bridge Rule target has a dead letter queue.