diff --git a/prowler/CHANGELOG.md b/prowler/CHANGELOG.md index 08a01233d7..467f2d8ef0 100644 --- a/prowler/CHANGELOG.md +++ b/prowler/CHANGELOG.md @@ -12,6 +12,7 @@ All notable changes to the **Prowler SDK** are documented in this file. ### 🐞 Fixed +- ENS RD 311/2022 (AWS) compliance mapping: `vpc_different_regions` was uncorrectly mapped under the `mp.com.4` family (Network segregation). That check is now mapped to a new `op.cont.2.aws.vpc.1` requirement under the Continuity of Service control [(#11372)](https://github.com/prowler-cloud/prowler/pull/11372) - Compliance CSV row count now matches the UI per requirement by sourcing rows from the framework JSON's `requirement.Checks` instead of the stale `finding.compliance` snapshot [(#11370)](https://github.com/prowler-cloud/prowler/pull/11370) --- diff --git a/prowler/compliance/aws/ens_rd2022_aws.json b/prowler/compliance/aws/ens_rd2022_aws.json index 8548e59a89..f6c574daef 100644 --- a/prowler/compliance/aws/ens_rd2022_aws.json +++ b/prowler/compliance/aws/ens_rd2022_aws.json @@ -2539,8 +2539,7 @@ } ], "Checks": [ - "vpc_subnet_separate_private_public", - "vpc_different_regions" + "vpc_subnet_separate_private_public" ] }, { @@ -2593,8 +2592,8 @@ } ], "Checks": [ - "vpc_subnet_different_az", - "vpc_different_regions" + "vpc_different_regions", + "vpc_subnet_different_az" ] }, { @@ -4262,6 +4261,29 @@ ], "Checks": [] }, + { + "Id": "op.cont.2.aws.vpc.1", + "Description": "Plan de continuidad", + "Attributes": [ + { + "IdGrupoControl": "op.cont.2", + "Marco": "operacional", + "Categoria": "continuidad del servicio", + "DescripcionControl": "Distribución de las VPCs entre múltiples regiones y zonas de disponibilidad de AWS para garantizar la continuidad del servicio ante fallos regionales o zonales.", + "Nivel": "alto", + "Tipo": "requisito", + "Dimensiones": [ + "disponibilidad" + ], + "ModoEjecucion": "automático", + "Dependencias": [] + } + ], + "Checks": [ + "vpc_different_regions", + "vpc_subnet_different_az" + ] + }, { "Id": "op.cont.3.aws.drs.1", "Description": "Pruebas periódicas",