sls-mentor v2.4.6

If the region is not configured for that profile, make sure to specify it using the -r flag in the command.

AWS Lambda:

• Lambda: Use ARM64 architecture: checks that you're using ARM64 architectures for your Lambda functions.
• Lambda: No shared IAM roles: checks that each one of your Lambda functions has its own IAM role.
• Lambda: Limited amount of versions: checks that you do not store all previous deployment versions for your Lambda functions.
• Lambda: Specify failure destination to async functions: checks that each one of your async Lambda functions has a failure destination.
• Lambda: No identical code: checks that each one of your Lambda functions has different code.
• Lambda: Light bundle: checks that each one of your Lambda functions' bundles is reasonably small.
• Lambda: Under maximum memory: checks that each one of your Lambda functions' memory size is reasonably small.
• Lambda: No maximum timeout: checks that your Lambda functions' timeout is not set at the maximum available.
• Lambda: No provisioned concurrency: checks that no Lambda function has provisioned concurrency. concurrency.
• Lambda: No deprecated runtime: checks that your Lambda functions do not run on deprecated runtime.

• S3: Use intelligent tiering: checks that each one of S3 buckets has intelligent tiering enabled.
• S3: Use HTTPS requests only: checks that users access buckets objects using SSL.

• SQS: Specify a DLQ on queues: checks that SQS queues have a dead-letter-queue specified in case of failure

• Cognito: Sign-in case insensitivity: checks that your Cognito user pool is insensitive to user name case.

• CloudWatch Log Groups: Defined logs retention duration: checks that each of your Log Groups has a defined log retention duration.

• EventBridge: Specified dead letter queue: checks that each Event Bridge Rule target has a dead letter queue.

• CloudFront: Enable security headers: checks that each CloudFront distributions have basic security headers enabled.
• CloudFront: SSL certificate associated: checks that each CloudFront distributions have a SSL certificate associated (IAM or ACM).

• RDS: Enable instance autoscaling: checks that RDS instances have autoscaling enabled.

• Backup: Defined Backup Retention Period or Transition to Cold Storage: checks that each rule of any Backup Plan has a defined retention period or transition to cold storage date.

• API Gateway: Use authorized routes: checks that each API Gateway route has an authorizer configured.