| ID | Title | Description | Threat Mappings |
|---|---|---|---|
| CCC.KeyMgmt.CP01 | AES-256 | Support for the AES-256 Advanced Encryption Standard with a 256-bit key for encryption and decryption. | 0 |
| CCC.KeyMgmt.CP02 | RSA-2048 | Supports the RSA algorithm with a key size of 2048 bits for encryption and digital signatures. | 0 |
| CCC.KeyMgmt.CP03 | RSA-3072 | Supports the RSA algorithm with a key size of 3072 bits for encryption and digital signatures. | 0 |
| CCC.KeyMgmt.CP04 | RSA-4096 | Supports the RSA algorithm with a key size of 4096 bits for encryption and digital signatures. | 0 |
| CCC.KeyMgmt.CP05 | EC-P256 | Supports the elliptic curve signing algorithm using the P-256 Curve for digital signatures. | 0 |
| CCC.KeyMgmt.CP06 | EC-P256K | Supports the elliptic curve signing algorithm using the Secp256k1 Curve for digital signatures. | 0 |
| CCC.KeyMgmt.CP07 | EC-P384 | Supports the elliptic curve signing algorithm using the P-384 Curve for digital signatures. | 0 |
| CCC.KeyMgmt.CP08 | Key Creation | Supports secure key creation within the key management service using the supported algorithms. | 0 |
| CCC.KeyMgmt.CP09 | Encrypt data | Provides the ability to securely encrypt data using a managed key in the supported encryption algorithms. | 0 |
| CCC.KeyMgmt.CP10 | Decrypt data | Provides the ability to securely decrypt data using a managed key in the supported encryption algorithms. | 1 |
| CCC.KeyMgmt.CP11 | Create Digital Signature | Supports the generation of a digital signature for data using the supported signing algorithms. | 0 |
| CCC.KeyMgmt.CP12 | Verify Digital Signature | Supports the verification of the digital signature of some data using the supported signing algorithms. | 0 |
| CCC.KeyMgmt.CP13 | Supports FIPS 140-2 Level 3 | Supports FIPS 140-2 Level 3 certified Hardware Security Modules (HSM). | 0 |
| CCC.KeyMgmt.CP14 | Key Versioning | Provides the ability to manage multiple versions of a key. | 1 |
| CCC.KeyMgmt.CP15 | Key label | Supports the ability to tag a managed key with user defined labels. | 0 |
| CCC.KeyMgmt.CP16 | Disable key | Supports the ability to disable a managed key without deletion. | 1 |
| CCC.KeyMgmt.CP17 | Enable key | Supports the ability to re-enable a disabled managed key. | 1 |
| CCC.KeyMgmt.CP18 | Soft Delete | Supports the ability to prevent the immediate deletion of a managed key. This includes the ability to recover accidental deletion of keys within a grace period. | 1 |
| CCC.KeyMgmt.CP19 | Delete Key | Supports the ability to permanently delete a managed key after the grace period defined on soft delete. | 1 |
| CCC.KeyMgmt.CP20 | Automatic Symmetric Key Rotation | Supports the ability to automatically rotate a managed symmetric key as long as the key was generated within the KMS. | 1 |
| CCC.KeyMgmt.CP21 | Manual Key Rotation | Supports the ability to manually rotate a managed key. | 1 |
| CCC.KeyMgmt.CP22 | Key Import | Supports the ability to import externally generated keys into the KMS. | 1 |
| CCC.KeyMgmt.CP23 | Key Expiry | Supports the ability to set an expiration date for a key | 0 |
| CCC.KeyMgmt.CP24 | Key Replication | Supports the ability to securely replicate a key across different regions using automated or manual process. | 0 |
Imports
| ID | Remarks |
|---|---|
| CCC.Core.CP01 | Encryption in Transit Enabled by Default |
| CCC.Core.CP02 | Encryption at Rest Enabled by Default |
| CCC.Core.CP03 | Access Log Publication |
| CCC.Core.CP06 | Access Control |
| CCC.Core.CP07 | Event Publication |
| CCC.Core.CP08 | Data Replication |
| CCC.Core.CP09 | Metrics Publication |
| CCC.Core.CP10 | Log Publication |
| CCC.Core.CP14 | API Access |
| CCC.Core.F19 | Resource Scaling |
| CCC.Core.F28 | Command-line |
| CCC.Core.F29 | Active Ingestion |