diff --git a/deployment/cf-templates/identification.json b/deployment/cf-templates/identification.json index 054dd88b..eaddc546 100755 --- a/deployment/cf-templates/identification.json +++ b/deployment/cf-templates/identification.json @@ -729,7 +729,7 @@ { "Ref": "ResourcesPrefix" }, { "Ref": "IdentificationIAMRole" } ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "35 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "10 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": {"Ref": "SourceIdentificationSG"}, @@ -769,7 +769,7 @@ { "Ref": "ResourcesPrefix" }, { "Ref": "IdentificationIAMRole" } ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "15 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "10 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": { "Ref": "SourceIdentificationCloudTrails" }, @@ -929,7 +929,7 @@ { "Ref": "ResourcesPrefix" }, { "Ref": "IdentificationIAMRole" } ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "0 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "10 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": { "Ref": "SourceIdentificationIAMUserInactiveKeys" }, @@ -969,7 +969,7 @@ { "Ref": "ResourcesPrefix" }, { "Ref": "IdentificationIAMRole" } ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "20 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "10 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": { "Ref": "SourceIdentificationEBSVolumes" }, @@ -1009,7 +1009,7 @@ { "Ref": "ResourcesPrefix" }, { "Ref": "IdentificationIAMRole" } ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "25 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "30 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": { "Ref": "SourceIdentificationEBSSnapshots" }, @@ -1089,7 +1089,7 @@ { "Ref": "ResourcesPrefix" }, { "Ref": "IdentificationIAMRole" } ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "40 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "30 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": { "Ref": "SourceIdentificationSQSPublicPolicy" }, @@ -1129,7 +1129,7 @@ { "Ref": "ResourcesPrefix" }, { "Ref": "IdentificationIAMRole" } ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "10 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "30 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": { "Ref": "SourceIdentificationS3Encryption" }, @@ -1169,7 +1169,7 @@ { "Ref": "ResourcesPrefix" }, { "Ref": "IdentificationIAMRole" } ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "40 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "30 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": { "Ref": "SourceIdentificationRDSEncryption" }, @@ -1209,7 +1209,7 @@ { "Ref": "ResourcesPrefix" }, { "Ref": "IdentificationIAMRole" } ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "45 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "30 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": { "Ref": "SourceIdentificationAMIPublicAccess" }, @@ -1249,7 +1249,7 @@ {"Ref": "ResourcesPrefix"}, {"Ref": "IdentificationIAMRole"} ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "40 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "30 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": { "Ref": "SourceIdentificationRedshiftPublicAccess" }, @@ -1289,7 +1289,7 @@ { "Ref": "ResourcesPrefix" }, { "Ref": "IdentificationIAMRole" } ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "40 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "30 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": { "Ref": "SourceIdentificationRedshiftClusterEncryption" }, @@ -1330,7 +1330,7 @@ { "Ref": "ResourcesPrefix" }, { "Ref": "IdentificationIAMRole" } ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "40 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "50 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": { "Ref": "SourceIdentificationRedshiftLogging" }, @@ -1370,7 +1370,7 @@ { "Ref": "ResourcesPrefix" }, { "Ref": "IdentificationIAMRole" } ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "40 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "50 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": { "Ref": "SourceIdentificationECSPrivilegedAccess" }, @@ -1410,7 +1410,7 @@ {"Ref": "ResourcesPrefix"}, {"Ref": "IdentificationIAMRole"} ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["",["cron(","40 ",{"Ref": "IdentificationCheckRateExpression"},")"]]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["",["cron(","50 ",{"Ref": "IdentificationCheckRateExpression"},")"]]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": {"Ref": "SourceIdentificationECSLogging"}, @@ -1450,7 +1450,7 @@ { "Ref": "ResourcesPrefix" }, { "Ref": "IdentificationIAMRole" } ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "40 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "50 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": { "Ref": "SourceIdentificationECSExternalImageSource" }, @@ -1490,7 +1490,7 @@ { "Ref": "ResourcesPrefix" }, { "Ref": "IdentificationIAMRole" } ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "40 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "50 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": { "Ref": "SourceIdentificationElasticSearchEncryption" }, @@ -1530,7 +1530,7 @@ { "Ref": "ResourcesPrefix" }, { "Ref": "IdentificationIAMRole" } ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "40 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "50 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": { "Ref": "SourceIdentificationElasticSearchLogging" }, @@ -1570,7 +1570,7 @@ { "Ref": "ResourcesPrefix" }, { "Ref": "IdentificationIAMRole" } ] ]}, - "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "40 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, + "IdentificationCheckRateExpression": {"Fn::Join": ["", [ "cron(", "50 ", { "Ref": "IdentificationCheckRateExpression" }, ")" ] ]}, "LambdaSubnets": {"Ref": "LambdaSubnets"}, "LambdaSecurityGroups": {"Ref": "LambdaSecurityGroups"}, "IdentificationLambdaSource": { "Ref": "SourceIdentificationElasticSearchPublicAccess" },