| isAwsConfigEnabled() |  | 0% | | 0% | 3 | 3 | 3 | 3 | 1 | 1 |
| isAuditManagerEnabled() | | 0% | | 0% | 3 | 3 | 3 | 3 | 1 | 1 |
| isEfsEncryptionInTransitEnabled() | | 0% | | 0% | 3 | 3 | 3 | 3 | 1 | 1 |
| isEfsEncryptionAtRestEnabled() | | 0% | | 0% | 3 | 3 | 3 | 3 | 1 | 1 |
| isCloudFrontEnabled() | | 0% | | 0% | 3 | 3 | 3 | 3 | 1 | 1 |
| isAlbAccessLoggingEnabled() | | 0% | | 0% | 3 | 3 | 3 | 3 | 1 | 1 |
| isMacieEnabled() | | 0% | | 0% | 3 | 3 | 3 | 3 | 1 | 1 |
| isMacieAutomatedDiscoveryEnabled() | | 0% | | 0% | 3 | 3 | 3 | 3 | 1 | 1 |
| isSecurityHubEnabled() | | 0% | | 0% | 3 | 3 | 3 | 3 | 1 | 1 |
| isInspectorEnabled() | | 0% | | 0% | 3 | 3 | 3 | 3 | 1 | 1 |
| isAntiMalwareEnabled() | | 0% | | 0% | 3 | 3 | 3 | 3 | 1 | 1 |
| isFileIntegrityMonitoringEnabled() | | 0% | | 0% | 3 | 3 | 3 | 3 | 1 | 1 |
| isContainerRuntimeSecurityEnabled() | | 0% | | 0% | 3 | 3 | 3 | 3 | 1 | 1 |
| isContainerImageScanningEnabled() | | 0% | | 0% | 3 | 3 | 3 | 3 | 1 | 1 |
| isCloudTrailInsightsEnabled() | | 0% | | 0% | 3 | 3 | 3 | 3 | 1 | 1 |
| isHttpsStrictEnabled() |  | 60% | | 50% | 2 | 3 | 1 | 3 | 0 | 1 |
| isCloudTrailEnabled() | | 86% | | 50% | 2 | 3 | 1 | 3 | 0 | 1 |
| isGuardDutyEnabled() | | 86% | | 50% | 2 | 3 | 1 | 3 | 0 | 1 |
| isEbsEncryptionEnabled() | | 86% | | 50% | 2 | 3 | 1 | 3 | 0 | 1 |
| isS3EncryptionEnabled() | | 86% | | 50% | 2 | 3 | 1 | 3 | 0 | 1 |
| isRoute53QueryLoggingEnabled() | | 86% | | 50% | 2 | 3 | 1 | 3 | 0 | 1 |
| isS3ObjectLockEnabled() | | 86% | | 50% | 2 | 3 | 1 | 3 | 0 | 1 |
| getFlowLogRetentionDays() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| isVpcEndpointsEnabled() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| isNatGatewayEnabled() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| getBackupRetentionDays() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| isBackupVaultLockEnabled() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| isBackupVaultRetentionEnabled() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| isDetailedBillingEnabled() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| getAlbAccessLogRetentionDays() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| isMultiAzEnforced() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| isRdsDeletionProtectionRemediationEnabled() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| isSecurityHubRemediationEnabled() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| isInspectorRemediationEnabled() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| isMacieRemediationEnabled() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| isEcrImageScanningRemediationEnabled() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| isFlowLogsEnabled() | | 100% | | 100% | 0 | 3 | 0 | 3 | 0 | 1 |
| isSecurityMonitoringEnabled() | | 100% | | 75% | 1 | 3 | 0 | 3 | 0 | 1 |
| isRestrictSecurityGroupEgressEnabled() | | 100% | | 75% | 1 | 3 | 0 | 3 | 0 | 1 |
| isWafEnabled() | | 100% | | 100% | 0 | 3 | 0 | 3 | 0 | 1 |
| isAutomatedBackupEnabled() | | 100% | | 75% | 1 | 3 | 0 | 3 | 0 | 1 |
| isCrossRegionBackupEnabled() | | 100% | | 75% | 1 | 3 | 0 | 3 | 0 | 1 |
| isCloudWatchLogsKmsEncryptionEnabled() | | 100% | | 75% | 1 | 3 | 0 | 3 | 0 | 1 |
| getNatGatewayCount(TopologyType, RuntimeType, NetworkMode) | | 100% | | 100% | 0 | 2 | 0 | 3 | 0 | 1 |
| DevSecurityProfileConfiguration(DeploymentContext) | | 100% | | n/a | 0 | 1 | 0 | 3 | 0 | 1 |
| DevSecurityProfileConfiguration() | | 100% | | n/a | 0 | 1 | 0 | 2 | 0 | 1 |
| getSecurityProfile() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| getLogRetentionDays() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| getLogRemovalPolicy() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| getFlowLogTrafficType() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isAutoScalingEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| getMinInstanceCount() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| getMaxInstanceCount() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isS3VersioningRemediationEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isCloudTrailBucketAccessRemediationEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isEbsEncryptionRemediationEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isGuardDutyRemediationEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isVpcDefaultSgRemediationEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isElbDeletionProtectionRemediationEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isKmsKeyRotationRemediationEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isSshRemovalRemediationEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isAccessKeyRotationRemediationEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isDynamoDbPitrRemediationEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isRdsMultiAzRemediationEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isRdsEncryptionRemediationEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isRdsDeletionProtectionEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isRdsDatabaseMultiAzEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isMfaRequired() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| getDefaultMfaMethod() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| getAccessTokenValidityHours() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| getIdTokenValidityHours() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| getRefreshTokenValidityDays() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| getMinimumPasswordLength() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| getTempPasswordValidityDays() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isSelfSignupEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isPreventUserExistenceErrorsEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isAdvancedSecurityEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isSnsKmsEncryptionEnabled() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| isImdsv2Required() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |