Package com.cloudforgeci.api.core.rules

Class KeyManagementRules

java.lang.Object

com.cloudforgeci.api.core.rules.KeyManagementRules

All Implemented Interfaces:

FrameworkRules<SystemContext>

@ComplianceFramework(value="KeyManagement",
                     priority=-10,
                     alwaysLoad=true,
                     displayName="Key Management & Encryption",
                     description="Cross-framework key management and encryption validation")
public class KeyManagementRules
extends Object
implements FrameworkRules<SystemContext>

Key Management compliance validation rules.

These rules enforce cryptographic key management best practices across multiple compliance frameworks:

• PCI-DSS - Requirement 3.5, 3.6: Cryptographic key management
• HIPAA - §164.312(a)(2)(iv): Encryption key management
• SOC 2 - CC6.1: Encryption key protection
• GDPR - Article 32(1)(a): Encryption of personal data

Controls Implemented

• KMS key rotation enforcement
• Certificate lifecycle management
• Secrets Manager integration for credentials
• Key access policies and least privilege

Usage

 // Automatically loaded via FrameworkLoader (v2.0 pattern)
 // Or manually: new KeyManagementRules().install(ctx);
 

Since:

3.0.0

Constructor Summary

Constructors

Constructor	Description
KeyManagementRules()

Method Summary

Modifier and Type	Method	Description
void	install(SystemContext ctx)	Install key management validation rules.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.cloudforge.core.interfaces.FrameworkRules

alwaysLoad, description, displayName, frameworkId, priority

Constructor Details

KeyManagementRules

public KeyManagementRules()

Method Details

install

public void install(SystemContext ctx)

Install key management validation rules. These rules apply to PRODUCTION and STAGING environments.

Specified by:

install in interface FrameworkRules<SystemContext>

Parameters:

ctx - System context