Class CdnApiSecurityRules

java.lang.Object

com.cloudforgeci.api.core.rules.CdnApiSecurityRules

All Implemented Interfaces:

FrameworkRules<SystemContext>

@ComplianceFramework(value="CdnApiSecurity",
                     priority=0,
                     alwaysLoad=true,
                     displayName="CDN & API Security",
                     description="Cross-framework CDN and API Gateway security validation")
public class CdnApiSecurityRules
extends Object
implements FrameworkRules<SystemContext>

CDN and API security compliance validation rules.

These rules enforce CloudFront and API Gateway security requirements across multiple compliance frameworks:

• PCI-DSS - Req 4.1: Encrypt transmission; Req 6.6: WAF protection
• HIPAA - §164.312(e)(1): Transmission security
• SOC 2 - CC6.6/CC6.7: Network and data protection
• GDPR - Art.32(1)(a): Encryption of data

Controls Implemented

• CloudFront HTTPS enforcement
• CloudFront WAF integration
• API Gateway access logging
• API Gateway SSL/TLS configuration
• Minimum TLS version enforcement

Since:

3.0.0

Constructor Summary

Constructors

Constructor	Description
CdnApiSecurityRules()

Method Summary

Modifier and Type	Method	Description
Set<String>	claimedControls()	Controls checked across every validate* method above -- see FrameworkRules.claimedControls().
void	install(SystemContext ctx)	Install compliance validation rules into the CDK construct tree.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface FrameworkRules

alwaysLoad, description, displayName, frameworkId, getRequiredConfiguration, priority

Constructor Details

CdnApiSecurityRules

public CdnApiSecurityRules()

Method Details

install

public void install(SystemContext ctx)

Description copied from interface: FrameworkRules

Install compliance validation rules into the CDK construct tree.

This method is called during CDK synthesis to register validation rules for the compliance framework. Implementations should use ctx.getNode().addValidation() to add CDK validations.

Specified by:

install in interface FrameworkRules<SystemContext>

Parameters:

ctx - the system context containing deployment configuration and CDK stack

claimedControls

public Set<String> claimedControls()

Controls checked across every validate* method above -- see FrameworkRules.claimedControls(). The CLOUDFRONT-HTTPS rule passes a hardcoded true into validateControlMultiFramework, so it can never fail and is not itself a conditional check; CDN_SECURITY is claimed instead via the TLS 1.2 minimum-version check, which is a genuine conditional in the same method. CloudFront access logging and API Gateway X-Ray tracing are conditional checks with no corresponding matrix control and are not claimed.

Specified by:

claimedControls in interface FrameworkRules<SystemContext>

Returns:

the control identifiers this framework's install() validates; empty if undeclared