service-name: awsVpcGood
plugin-name: ccc-behavioural-plugin
plugin-uri: https://github.com/finos/common-cloud-controls
plugin-version: 0.0.0-dev
evaluation-suites:
- name: awsVpcGood_CCC.VPC
  result: Failed
  catalog-id: CCC.VPC
  start-time: 2026-07-17 08:36:51.63079104 +0000 UTC m=+61.618853187
  end-time: 2026-07-17 08:36:51.630842586 +0000 UTC m=+61.618904723
  corrupted-state: false
  control-evaluations:
    metadata:
      id: ""
      type: Invalid
      gemara-version: ""
      description: ""
      author:
        id: ""
        name: ccc-behavioural-plugin
        type: Invalid
        version: 0.0.0-dev
        uri: https://github.com/finos/common-cloud-controls
    result: Not Run
    evaluations:
    - name: Restrict Default Network Creation
      result: Not Run
      message: no Godog scenarios executed for CCC.VPC.CN01.AR01
      control:
        reference-id: CCC.VPC
        entry-id: CCC.VPC.CN01
      assessment-logs:
      - requirement:
          reference-id: ""
          entry-id: CCC.VPC.CN01.AR01
        description: |
          Restrict the automatic creation of default virtual networks and related
          resources during subscription initialization to avoid insecure default
          configurations and enforce custom network policies.
        result: Not Run
        message: no Godog scenarios executed for CCC.VPC.CN01.AR01
        applicability:
        - tlp-amber
        - tlp-red
        steps:
        - main.behaviouralStepsFromCollector.noGodogCoverageStep.func2
        steps-executed: 1
        start: "2026-07-17T08:36:51Z"
        end: "2026-07-17T08:36:51Z"
    - name: Limit Resource Creation in Public Subnet
      result: Failed
      message: "Behavioural check (active): resource launched in public subnet is not assigned an external IP"
      control:
        reference-id: CCC.VPC
        entry-id: CCC.VPC.CN02
      assessment-logs:
      - requirement:
          reference-id: ""
          entry-id: CCC.VPC.CN02.AR01
        description: |
          Restrict the creation of resources in the public subnet with
          direct access to the internet to minimize attack surfaces.
        result: Failed
        message: "Behavioural check (active): resource launched in public subnet is not assigned an external IP"
        applicability:
        - tlp-red
        steps:
        - main.behaviouralStepsFromCollector.godogScenarioStep.func3
        steps-executed: 1
        start: "2026-07-17T08:36:51Z"
        confidence-level: Medium
    - name: Restrict VPC Peering to Authorized Accounts
      result: Not Run
      message: no Godog scenarios executed for CCC.VPC.CN03.AR01
      control:
        reference-id: CCC.VPC
        entry-id: CCC.VPC.CN03
      assessment-logs:
      - requirement:
          reference-id: ""
          entry-id: CCC.VPC.CN03.AR01
        description: |
          Ensure VPC peering connections are only established with explicitly
          authorized destinations to limit network exposure and enforce boundary
          controls.
        result: Not Run
        message: no Godog scenarios executed for CCC.VPC.CN03.AR01
        applicability:
        - tlp-green
        - tlp-amber
        - tlp-red
        steps:
        - main.behaviouralStepsFromCollector.noGodogCoverageStep.func2
        steps-executed: 1
        start: "2026-07-17T08:36:51Z"
        end: "2026-07-17T08:36:51Z"
    - name: Enforce VPC Flow Logs on VPCs
      result: Failed
      message: "Behavioral check (active): traffic produces flow log records"
      control:
        reference-id: CCC.VPC
        entry-id: CCC.VPC.CN04
      assessment-logs:
      - requirement:
          reference-id: ""
          entry-id: CCC.VPC.CN04.AR01
        description: |
          Ensure VPCs are configured with flow logs enabled to capture traffic
          information.
        result: Failed
        message: "Behavioral check (active): traffic produces flow log records"
        applicability:
        - tlp-amber
        - tlp-red
        steps:
        - main.behaviouralStepsFromCollector.godogScenarioStep.func3
        steps-executed: 1
        start: "2026-07-17T08:36:51Z"
        confidence-level: Medium
    target:
      id: ""
      name: ""
      type: Invalid
