Question 1

Is deletion_protection_enabled enforced for NIST Cybersecurity Framework v2.0?

Accepted Answer

Yes, This control checks whether an Amazon DynamoDB table has deletion protection enabled. The control fails if a DynamoDB table doesn't have deletion protection enabled.

Question 2

Is point_in_time_recovery_enabled enforced for NIST Cybersecurity Framework v2.0?

Accepted Answer

Yes, Enable this rule to check that information has been backed up. It also maintains the backups by ensuring that point-in-time recovery is enabled in AWS DynamoDB.

Question 3

Is server_side_encryption_enabled enforced for NIST Cybersecurity Framework v2.0?

Accepted Answer

Yes, Ensure that encryption is enabled for your AWS DynamoDB tables. Because sensitive data can exist at rest in these tables, enable encryption at rest to help protect that data.

Question 4

Is server_side_encryption_kms_key_arn enforced for NIST Cybersecurity Framework v2.0?

Accepted Answer

Yes, Ensure that encryption is enabled for your AWS DynamoDB tables. Because sensitive data can exist at rest in these tables, enable encryption at rest to help protect that data.

AWS DynamoDB Table Terraform module

Terraform Module Source