Class DatabaseSecurityRules

java.lang.Object

com.cloudforgeci.api.core.rules.DatabaseSecurityRules

All Implemented Interfaces:

FrameworkRules<SystemContext>

@ComplianceFramework(value="DatabaseSecurity",
                     priority=-5,
                     alwaysLoad=true,
                     displayName="Database Security",
                     description="Cross-framework database security validation")
public class DatabaseSecurityRules
extends Object
implements FrameworkRules<SystemContext>

Database security compliance validation rules.

These rules enforce database security best practices across multiple compliance frameworks:

• PCI-DSS - Req 3.4, 8.7: Database encryption and access control
• HIPAA - §164.312(a)(2)(iv), §164.310(d): Database encryption and backup
• SOC 2 - CC6.1, A1.3: Data protection and availability
• GDPR - Art.32, Art.25: Security and data protection by design

Controls Implemented

• RDS encryption at rest enforcement
• RDS automated backup validation
• Multi-AZ deployment for production
• Database activity monitoring
• DynamoDB encryption and backup

Usage

// Automatically loaded via FrameworkLoader (v2.0 pattern)
// Or manually: new DatabaseSecurityRules().install(ctx);

Since:

3.0.0

Constructor Summary

Constructors

Constructor	Description
DatabaseSecurityRules()

Method Summary

Modifier and Type	Method	Description
Set<String>	claimedControls()	Controls checked across every validate* method above -- see FrameworkRules.claimedControls().
void	install(SystemContext ctx)	Install database security validation rules.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface FrameworkRules

alwaysLoad, description, displayName, frameworkId, getRequiredConfiguration, priority

Constructor Details

DatabaseSecurityRules

public DatabaseSecurityRules()

Method Details

install

public void install(SystemContext ctx)

Install database security validation rules. These rules apply primarily to PRODUCTION environments.

Specified by:

install in interface FrameworkRules<SystemContext>

Parameters:

ctx - System context

claimedControls

public Set<String> claimedControls()

Controls checked across every validate* method above -- see FrameworkRules.claimedControls(). RDS automatic minor-version upgrade and backup-retention-period length are conditional checks with no corresponding ComplianceMatrix.SecurityControl entry, so they aren't claimed here.

validateRdsSecurity and validateDatabaseAccessControl(SystemContext) both gate on ctx.dbConnection -- the "was a database provisioned" signal every other framework's matrix-controls checks use -- rather than a self-attested context flag, so RDS-ENCRYPTION/RDS-BACKUP/RDS-MULTI-AZ/etc can't validate a database that doesn't exist or skip one that does.

Specified by:

claimedControls in interface FrameworkRules<SystemContext>

Returns:

the control identifiers this framework's install() validates; empty if undeclared