Class DatabaseSecurityRules

java.lang.Object
com.cloudforgeci.api.core.rules.DatabaseSecurityRules
All Implemented Interfaces:
FrameworkRules<SystemContext>

@ComplianceFramework(value="DatabaseSecurity", priority=-5, alwaysLoad=true, displayName="Database Security", description="Cross-framework database security validation") public class DatabaseSecurityRules extends Object implements FrameworkRules<SystemContext>
Database security compliance validation rules.

These rules enforce database security best practices across multiple compliance frameworks:

  • PCI-DSS - Req 3.4, 8.7: Database encryption and access control
  • HIPAA - §164.312(a)(2)(iv), §164.310(d): Database encryption and backup
  • SOC 2 - CC6.1, A1.3: Data protection and availability
  • GDPR - Art.32, Art.25: Security and data protection by design

Controls Implemented

  • RDS encryption at rest enforcement
  • RDS automated backup validation
  • Multi-AZ deployment for production
  • Database activity monitoring
  • DynamoDB encryption and backup

Usage


 // Automatically loaded via FrameworkLoader (v2.0 pattern)
 // Or manually: new DatabaseSecurityRules().install(ctx);
 
Since:
3.0.0
  • Constructor Details

    • DatabaseSecurityRules

      public DatabaseSecurityRules()
  • Method Details

    • install

      public void install(SystemContext ctx)
      Install database security validation rules. These rules apply primarily to PRODUCTION environments.
      Specified by:
      install in interface FrameworkRules<SystemContext>
      Parameters:
      ctx - System context