Class AuditManagerControlRegistry

java.lang.Object
com.cloudforgeci.api.core.rules.AuditManagerControlRegistry

public final class AuditManagerControlRegistry extends Object
Central registry mapping infrastructure controls to multiple compliance frameworks.

This registry bridges the disconnect between:

  • Validation rules (Soc2Rules, PciDssRules, HipaaRules, GdprRules)
  • AWS Config rules created in ComplianceFactory
  • AWS Audit Manager control sets and evidence collection

Each control can map to multiple frameworks simultaneously. For example, encryption at rest applies to SOC2 (CC6.1), PCI-DSS (Req3.4), HIPAA (164.312), and GDPR (Art.32).

Usage in ComplianceFactory


 // Get all Config rules needed for PCI-DSS framework
 List<String> pciConfigRules = AuditManagerControlRegistry.getConfigRulesForFramework("PCI-DSS");

 // Get control details for evidence mapping
 AuditManagerControl encryptionControl = AuditManagerControlRegistry.getControl("ENCRYPTION_AT_REST");
 
  • Method Details

    • getControl

      public static AuditManagerControl getControl(String controlId)
      Get a control by its ID.
    • getAllControls

      public static List<AuditManagerControl> getAllControls()
      Get all controls.
    • getControlsForFramework

      public static List<AuditManagerControl> getControlsForFramework(String framework)
      Get all controls that apply to a specific framework.
    • getConfigRulesForFramework

      public static List<String> getConfigRulesForFramework(String framework)
      Get all AWS Config rule IDs needed for a specific framework. This tells ComplianceFactory which Config rules to create.
    • getEvidenceSourcesForFramework

      public static List<String> getEvidenceSourcesForFramework(String framework)
      Get all evidence sources needed for a specific framework. This tells ComplianceFactory which data sources to configure for Audit Manager.
    • getFrameworkControlMap

      public static Map<String,List<String>> getFrameworkControlMap(String framework)
      Get framework control mapping for evidence documentation.