rule_set_pci_dss_3_2_1.json

{
  "owner": "AWS",
  "ruleSetName": "PCI-DSS-3-2-1",
  "version": "1.0.0",
  "description" : "AWS Guard rule set based on the AWS Config Conformance Pack for PCI DSS 3.2.1.",
  "contact" : "aws-guard-rules-registry@amazon.com",
  "mappings": [
    {
      "guardFilePath": "rules/aws/aws_dms/dms_replication_not_public.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/ebs_snapshot_public_restorable_check.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/ec2_instance_no_public_ip.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/opensearch_service/elasticsearch_in_vpc_only.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_emr/emr_master_no_public_ip.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/restricted_ssh.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "2.2",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/ec2_instances_in_vpc.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/lambda/lambda_function_public_access_prohibited.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/lambda/lambda_inside_vpc.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_rds/rds_instance_public_access_check.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_rds/rds_snapshots_public_prohibited.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_redshift/redshift_cluster_public_access_check.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/restricted_common_ports.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "2.2",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_account_level_public_access_blocks_periodic.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_bucket_public_read_prohibited.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_bucket_public_write_prohibited.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_sagemaker/sagemaker_notebook_no_direct_internet_access.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/subnet_auto_assign_public_ip_disabled.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/vpc_default_security_group_closed.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "2.1",
        "2.2",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/vpc_sg_open_only_to_authorized_ports.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_bucket_level_public_access_prohibited.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/no_unrestricted_route_to_igw.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/systems_manager/ssm_document_not_public.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2_auto_scaling/autoscaling_launch_config_public_ip_disabled.guard",
      "controls": [
        "1.2",
        "1.2.1",
        "1.3",
        "1.3.1",
        "1.3.2",
        "1.3.4",
        "1.3.6",
        "2.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_redshift/redshift_enhanced_vpc_routing_enabled.guard",
      "controls": [
        "1.2",
        "1.3",
        "1.3.1",
        "1.3.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/access_keys_rotated.guard",
      "controls": [
        "2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/aws_organizations/account_part_of_organizations.guard",
      "controls": [
        "2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2_auto_scaling/autoscaling_group_elb_healthcheck_required.guard",
      "controls": [
        "2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/cloudtrail/cloud_trail_cloud_watch_logs_enabled.guard",
      "controls": [
        "2.2",
        "10.1",
        "10.2.1",
        "10.2.2",
        "10.2.3",
        "10.2.5",
        "10.3.1",
        "10.3.2",
        "10.3.3",
        "10.3.4",
        "10.3.5",
        "10.3.6",
        "10.5.3",
        "10.5.4"
      ]
    },
    {
      "guardFilePath": "rules/aws/cloudtrail/cloud_trail_encryption_enabled.guard",
      "controls": [
        "2.2",
        "3.4",
        "10.5"
      ]
    },
    {
      "guardFilePath": "rules/aws/cloudtrail/cloud_trail_log_file_validation_enabled.guard",
      "controls": [
        "2.2",
        "10.5.2",
        "10.5",
        "10.5.5",
        "11.5"
      ]
    },
    {
      "guardFilePath": "rules/aws/cloudtrail/cloudtrail_s3_dataevents_enabled.guard",
      "controls": [
        "2.2",
        "10.1",
        "10.2.1",
        "10.2.2",
        "10.2.3",
        "10.2.5",
        "10.3.1",
        "10.3.2",
        "10.3.3",
        "10.3.4",
        "10.3.5",
        "10.3.6"
      ]
    },
    {
      "guardFilePath": "rules/aws/aws_kms/cmk_backing_key_rotation_enabled.guard",
      "controls": [
        "2.2",
        "3.5",
        "3.6",
        "3.6.4"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/ec2_ebs_encryption_by_default.guard",
      "controls": [
        "2.2",
        "3.4",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/encrypted_volumes.guard",
      "controls": [
        "2.2",
        "3.4",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/iam_no_inline_policy_check.guard",
      "controls": [
        "2.2",
        "7.1.2",
        "7.1.3",
        "7.2.1",
        "7.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/iam_policy_no_statements_with_admin_access.guard",
      "controls": [
        "2.2",
        "7.1.2",
        "7.1.3",
        "7.2.1",
        "7.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/iam_root_access_key_check.guard",
      "controls": [
        "2.2",
        "7.1.2",
        "7.2.1",
        "8.1.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/iam_user_group_membership_check.guard",
      "controls": [
        "2.2",
        "7.1.2",
        "7.1.3",
        "7.2.1",
        "7.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/iam_user_no_policies_check.guard",
      "controls": [
        "2.2",
        "7.1.2",
        "7.1.3",
        "7.2.1",
        "7.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/iam_user_unused_credentials_check.guard",
      "controls": [
        "2.2",
        "7.2.1",
        "8.1.4"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/mfa_enabled_for_iam_console_access.guard",
      "controls": [
        "2.2",
        "8.3"
      ]
    },
    {
      "guardFilePath": "rules/aws/cloudtrail/multi_region_cloudtrail_enabled.guard",
      "controls": [
        "2.2",
        "10.1",
        "10.2.1",
        "10.2.2",
        "10.2.3",
        "10.2.4",
        "10.2.5",
        "10.2.6",
        "10.2.7",
        "10.3.1",
        "10.3.2",
        "10.3.3",
        "10.3.4",
        "10.3.5",
        "10.3.6"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/root_account_hardware_mfa_enabled.guard",
      "controls": [
        "2.2",
        "8.3"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/root_account_mfa_enabled.guard",
      "controls": [
        "2.2",
        "8.3"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_bucket_logging_enabled.guard",
      "controls": [
        "2.2",
        "10.1",
        "10.2.1",
        "10.2.2",
        "10.2.3",
        "10.2.4",
        "10.2.5",
        "10.2.7",
        "10.3.1",
        "10.3.2",
        "10.3.3",
        "10.3.4",
        "10.3.5",
        "10.3.6"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_bucket_replication_enabled.guard",
      "controls": [
        "2.2",
        "10.5.3"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_bucket_server_side_encryption_enabled.guard",
      "controls": [
        "2.2",
        "3.4",
        "8.2.1",
        "10.5"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_bucket_ssl_requests_only.guard",
      "controls": [
        "2.2",
        "4.1",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/vpc_flow_logs_enabled.guard",
      "controls": [
        "2.2",
        "10.1",
        "10.3.2",
        "10.3.3",
        "10.3.4",
        "10.3.5",
        "10.3.6"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/ec2_instance_profile_attached.guard",
      "controls": [
        "2.2",
        "7.1.1",
        "7.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/elastic_load_balancing_v2/alb_http_to_https_redirection_check.guard",
      "controls": [
        "2.3",
        "4.1",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/api_gateway_v2/api_gw_ssl_enabled.guard",
      "controls": [
        "2.3",
        "4.1",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/elastic_load_balancing/elb_predefined_security_policy_ssl_check.guard",
      "controls": [
        "2.3",
        "4.1",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/elastic_load_balancing/elb_tls_https_listeners_only.guard",
      "controls": [
        "2.3",
        "4.1",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_redshift/redshift_require_tls_ssl.guard",
      "controls": [
        "2.3",
        "4.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/ec2_instance_managed_by_systems_manager.guard",
      "controls": [
        "2.4"
      ]
    },
    {
      "guardFilePath": "rules/aws/cloudwatch/cw_loggroup_retention_period_check.guard",
      "controls": [
        "3.1",
        "10.7"
      ]
    },
    {
      "guardFilePath": "rules/aws/api_gateway_v2/api_gw_cache_enabled_and_encrypted.guard",
      "controls": [
        "3.4"
      ]
    },
    {
      "guardFilePath": "rules/aws/cloudwatch/cloudwatch_log_group_encrypted.guard",
      "controls": [
        "3.4"
      ]
    },
    {
      "guardFilePath": "rules/aws/dynamodb/dynamodb_table_encrypted_kms.guard",
      "controls": [
        "3.4",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_efs/efs_encrypted_check.guard",
      "controls": [
        "3.4",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/opensearch_service/elasticsearch_encrypted_at_rest.guard",
      "controls": [
        "3.4",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_rds/rds_snapshot_encrypted.guard",
      "controls": [
        "3.4",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_rds/rds_storage_encrypted.guard",
      "controls": [
        "3.4",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_redshift/redshift_cluster_configuration_check.guard",
      "controls": [
        "3.4",
        "8.2.1",
        "10.1",
        "10.2.1",
        "10.2.2",
        "10.2.3",
        "10.2.4",
        "10.2.5",
        "10.3.1",
        "10.3.2",
        "10.3.3",
        "10.3.4",
        "10.3.5",
        "10.3.6"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_redshift/redshift_cluster_kms_enabled.guard",
      "controls": [
        "3.4",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_default_encryption_kms.guard",
      "controls": [
        "3.4",
        "8.2.1",
        "10.5"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_sagemaker/sagemaker_endpoint_configuration_kms_key_configured.guard",
      "controls": [
        "3.4",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_sagemaker/sagemaker_notebook_instance_kms_key_configured.guard",
      "controls": [
        "3.4",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/secrets_manager/secretsmanager_using_cmk.guard",
      "controls": [
        "3.4",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/aws_kms/kms_cmk_not_scheduled_for_deletion.guard",
      "controls": [
        "3.5",
        "3.6"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/iam_customer_policy_blocked_kms_actions.guard",
      "controls": [
        "3.5.2",
        "7.1.2",
        "7.1.3",
        "7.2.1",
        "7.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/iam_inline_policy_blocked_kms_actions.guard",
      "controls": [
        "3.5.2",
        "7.1.2",
        "7.1.3",
        "7.2.1",
        "7.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/aws_certificate_manager/acm_certificate_expiration_check.guard",
      "controls": [
        "4.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/elastic_load_balancing_v2/alb_http_drop_invalid_header_enabled.guard",
      "controls": [
        "4.1",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/opensearch_service/elasticsearch_node_to_node_encryption_check.guard",
      "controls": [
        "4.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/elastic_load_balancing/elb_acm_certificate_required.guard",
      "controls": [
        "4.1",
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/elastic_load_balancing_v2/elbv2_acm_certificate_required.guard",
      "controls": [
        "4.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/guardduty/guardduty_enabled_centralized.guard",
      "controls": [
        "5.1.2",
        "6.1",
        "11.4"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/ec2_managedinstance_association_compliance_status_check.guard",
      "controls": [
        "6.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ec2/ec2_managedinstance_patch_compliance_status_check.guard",
      "controls": [
        "6.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_rds/rds_automatic_minor_version_upgrade_enabled.guard",
      "controls": [
        "6.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_redshift/redshift_cluster_maintenancesettings_check.guard",
      "controls": [
        "6.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/elastic_load_balancing_v2/alb_waf_enabled.guard",
      "controls": [
        "6.6"
      ]
    },
    {
      "guardFilePath": "rules/aws/api_gateway_v2/api_gw_associated_with_waf.guard",
      "controls": [
        "6.6"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/iam_group_has_users_check.guard",
      "controls": [
        "7.1.2",
        "7.1.3",
        "7.2.1",
        "7.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/iam_policy_no_statements_with_full_access.guard",
      "controls": [
        "7.1.2",
        "7.1.3",
        "7.2.1",
        "7.2.2"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_emr/emr_kerberos_enabled.guard",
      "controls": [
        "7.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_bucket_policy_grantee_check.guard",
      "controls": [
        "7.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_ecs/ecs_task_definition_user_for_host_mode_check.guard",
      "controls": [
        "7.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/codebuild/codebuild_project_envvar_awscred_check.guard",
      "controls": [
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/codebuild/codebuild_project_source_repo_url_check.guard",
      "controls": [
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_sns/sns_encrypted_kms.guard",
      "controls": [
        "8.2.1"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/iam_password_policy.guard",
      "controls": [
        "8.2.3",
        "8.2.4",
        "8.2.5"
      ]
    },
    {
      "guardFilePath": "rules/aws/iam/iam_user_mfa_enabled.guard",
      "controls": [
        "8.3"
      ]
    },
    {
      "guardFilePath": "rules/aws/api_gateway_v2/api_gw_execution_logging_enabled.guard",
      "controls": [
        "10.1",
        "10.3.1",
        "10.3.2",
        "10.3.3",
        "10.3.4",
        "10.3.5",
        "10.3.6",
        "10.5.4"
      ]
    },
    {
      "guardFilePath": "rules/aws/cloudtrail/cloudtrail_enabled.guard",
      "controls": [
        "10.1",
        "10.2.1",
        "10.2.2",
        "10.2.3",
        "10.2.4",
        "10.2.5",
        "10.2.6",
        "10.2.7",
        "10.3.1",
        "10.3.2",
        "10.3.3",
        "10.3.4",
        "10.3.5",
        "10.3.6"
      ]
    },
    {
      "guardFilePath": "rules/aws/elastic_load_balancing/elb_logging_enabled.guard",
      "controls": [
        "10.1",
        "10.3.1",
        "10.3.2",
        "10.3.3",
        "10.3.4",
        "10.3.5",
        "10.3.6",
        "10.5.4"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_rds/rds_logging_enabled.guard",
      "controls": [
        "10.1",
        "10.2.1",
        "10.2.2",
        "10.2.3",
        "10.2.4",
        "10.2.5",
        "10.3.1",
        "10.3.2",
        "10.3.3",
        "10.3.4",
        "10.3.5",
        "10.3.6"
      ]
    },
    {
      "guardFilePath": "rules/aws/aws_waf_v2/wafv2_logging_enabled.guard",
      "controls": [
        "10.1",
        "10.3.1",
        "10.3.2",
        "10.3.3",
        "10.3.4",
        "10.3.5",
        "10.3.6",
        "10.5.4"
      ]
    },
    {
      "guardFilePath": "rules/aws/opensearch_service/elasticsearch_logs_to_cloudwatch.guard",
      "controls": [
        "10.1",
        "10.2.1",
        "10.2.2",
        "10.2.3",
        "10.2.4",
        "10.2.5",
        "10.3.1",
        "10.3.2",
        "10.3.3",
        "10.3.4",
        "10.3.5",
        "10.3.6"
      ]
    },
    {
      "guardFilePath": "rules/aws/amazon_s3/s3_bucket_versioning_enabled.guard",
      "controls": [
        "10.5.3"
      ]
    }
  ]
}