AWS Systems Manager Parameter Store

/Solutions/SO0111/CMK_REMEDIATION_ARN

AWS KMS key that will encrypt data for FSBP remediations

Encryption of customer data, such as CloudTrail logs, as part of remediations

/Solutions/SO0111/CMK_ARN

AWS KMS key that ASR will use to encrypt data

Encryption of solution data

/Solutions/SO0111/SNS_Topic_ARN

ARN of the Amazon SNS topic for the solution

Notification of remediation events

/Solutions/SO0111/SNS_Topic_Config.1

SNS topic for AWS Config updates

Config.1 remediation

/Solutions/SO0111/version

Solution version

/Solutions/SO0111/<security standard long name>/<version>/status

enabled

Indicates whether the standard is active in the solution. A standard can be disabled for automated remediation by changing this to disabled

/Solutions/SO0111/<security standard long name>/shortname

String

Short name for the security standard. For example: CIS, AFSBP, PCI

/Solutions/SO0111/<security standard long name>/<version>/<control>/remap

String

When one control uses the same remediation as another, these parameters accomplish the remap

/ASR/Filters/AccountFilterMode

Include, Exclude, or Disabled

Controls the Account ID filtering behavior for fully automated remediations

/ASR/Filters/AccountFilters

Comma-delimited list of AWS Account IDs

List of AWS Account IDs for which the solution should filter automated remediations.

/ASR/Filters/OUFilterMode

Include, Exclude, or Disabled

Controls the Organizational Units (OUs) filtering behavior for fully automated remediations

/ASR/Filters/OUFilters

Comma-delimited list of Organization Unit Ids

List of OUs for which the solution should filter automated remediations.

/ASR/Filters/TagFilterMode

Include, Exclude, or Disabled

Controls the Resource Tag filtering behavior for fully automated remediations

/ASR/Filters/TagFilters

Comma-delimited list of Resource Tag Keys

List of Resource Tag Keys for which the solution should filter automated remediations.