OpenParable
Skip to content
← Back to skills

Cis AWS Compute 16.1

DevOps & Security
cis-aws-compute-16.1

Cis AWS Compute 16.1 is an Agent Skill for devops & security published in the CyberStrikeus/CyberStrike repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Ensure communications between your applications and clients is encrypted

View on GitHub ↗
QUICK START

How to use this skill

Bring this guide into your coding agent with a prompt tailored to the tool you use.

  1. Open your project in Codex.
  2. Copy and paste the prompt below.
  3. Review files and risks before approving any action.
Prompt to paste
Inspect the Agent Skill at https://github.com/CyberStrikeus/CyberStrike/blob/HEAD/.cyberstrike/skill/CIS_benchmarks/Cloud_Providers/AWS/CIS_AWS_Compute_Services_Benchmark_v1.1.0/cis-aws-compute-16.1/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/cis-aws-compute-16-1, but wait for my approval before writing files or running scripts.

Copying this prompt does not install or run the skill. Review third-party files before use.

16.1 Ensure communications between your applications and clients is encrypted (Manual)

Description

SimSpace Weaver doesn't manage communications between your apps and the clients.

Rationale

Be sure to implement some form of authentication and encryption for all client sessions while using SimSpace Weaver.

Impact

N/A

Audit Procedure

Using AWS Console

There is no setting for encryption setup for your clients and applications within SimSpace Weaver service. For this audit you have to confirm that the communication is configured in the app and the client with encryption to protect that traffic.

Using AWS CLI

N/A - This control is manual. There are no AWS CLI commands specific to SimSpace Weaver encryption settings as the encryption must be configured at the application/client level.

Expected Result

Communications between applications and clients running inside SimSpace Weaver are configured with encryption (e.g., TLS) to protect traffic.

Remediation

Using AWS Console

Confirm that the communication you have configured between your application and clients that run inside of SimSpace Weaver are encrypted.

Using AWS CLI

N/A - Remediation is application-level and not managed through AWS CLI.

Default Value

SimSpace Weaver does not manage or enforce encryption between applications and clients by default. This is the responsibility of the application developer.

References

  1. https://docs.aws.amazon.com/simspaceweaver/latest/userguide/security_best-practices.html

CIS Controls

Controls VersionControlIG 1IG 2IG 3
v83.10 Encrypt Sensitive Data in TransitXX
v714.4 Encrypt All Sensitive Information in TransitXX

Profile

Level 1 | Manual