Lacework assigns custom attributes to policies to help identify and organize the alerts generated when a policy's violation occurs.
The following tables list all default policy tags.
security:compliance
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Critical | lacework-global-69 | security:compliance |
| AWS | Critical | lacework-global-35 | security:compliance |
| AWS | Critical | lacework-global-34 | security:compliance |
| AWS | High | lacework-global-88 | security:compliance |
| AWS | High | lacework-global-87 | security:compliance |
| AWS | High | lacework-global-78 | security:compliance |
| AWS | High | lacework-global-77 | security:compliance |
| AWS | High | lacework-global-76 | security:compliance |
| AWS | High | lacework-global-68 | security:compliance |
| AWS | High | lacework-global-67 | security:compliance |
| AWS | High | lacework-global-56 | security:compliance |
| AWS | High | lacework-global-54 | security:compliance |
| AWS | High | lacework-global-47 | security:compliance |
| AWS | High | lacework-global-45 | security:compliance |
| AWS | High | lacework-global-42 | security:compliance |
| AWS | High | lacework-global-39 | security:compliance |
| AWS | Medium | lacework-global-86 | security:compliance |
| AWS | Medium | lacework-global-85 | security:compliance |
| AWS | Medium | lacework-global-84 | security:compliance |
| AWS | Medium | lacework-global-83 | security:compliance |
| AWS | Medium | lacework-global-82 | security:compliance |
| AWS | Medium | lacework-global-81 | security:compliance |
| AWS | Medium | lacework-global-80 | security:compliance |
| AWS | Medium | lacework-global-79 | security:compliance |
| AWS | Medium | lacework-global-74 | security:compliance |
| AWS | Medium | lacework-global-73 | security:compliance |
| AWS | Medium | lacework-global-72 | security:compliance |
| AWS | Medium | lacework-global-71 | security:compliance |
| AWS | Medium | lacework-global-70 | security:compliance |
| AWS | Medium | lacework-global-65 | security:compliance |
| AWS | Medium | lacework-global-64 | security:compliance |
| AWS | Medium | lacework-global-63 | security:compliance |
| AWS | Medium | lacework-global-62 | security:compliance |
| AWS | Medium | lacework-global-60 | security:compliance |
| AWS | Medium | lacework-global-58 | security:compliance |
| AWS | Medium | lacework-global-57 | security:compliance |
| AWS | Medium | lacework-global-53 | security:compliance |
| AWS | Medium | lacework-global-52 | security:compliance |
| AWS | Medium | lacework-global-51 | security:compliance |
| AWS | Medium | lacework-global-50 | security:compliance |
| AWS | Medium | lacework-global-49 | security:compliance |
| AWS | Medium | lacework-global-48 | security:compliance |
| AWS | Medium | lacework-global-43 | security:compliance |
| AWS | Medium | lacework-global-41 | security:compliance |
| AWS | Medium | lacework-global-40 | security:compliance |
| AWS | Medium | lacework-global-37 | security:compliance |
| AWS | Low | lacework-global-75 | security:compliance |
| AWS | Low | lacework-global-66 | security:compliance |
| AWS | Low | lacework-global-61 | security:compliance |
| AWS | Low | lacework-global-59 | security:compliance |
| AWS | Low | lacework-global-38 | security:compliance |
| AWS | Low | lacework-global-36 | security:compliance |
| AWS | Low | lacework-global-33 | security:compliance |
| AWS | Low | lacework-global-32 | security:compliance |
| AWS | Low | lacework-global-31 | security:compliance |
framework:cis-aws-1-4-0
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-38 | framework:cis-aws-1-4-0 |
| AWS | Low | lacework-global-36 | framework:cis-aws-1-4-0 |
| AWS | Low | lacework-global-33 | framework:cis-aws-1-4-0 |
| AWS | Low | lacework-global-32 | framework:cis-aws-1-4-0 |
| AWS | Low | lacework-global-31 | framework:cis-aws-1-4-0 |
identifier:CCE-79201-0
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-87 | identifier:CCE-79201-0 |
identifier:CCE-79192-1
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-83 | identifier:CCE-79192-14 |
identifier:CCE-79194-7
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-85 | identifier:CCE-79194-7 |
identifier:CCE-79195-4
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-84 | identifier:CCE-79195-4 |
identifier:CCE-79196-2
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-86 | identifier:CCE-79196-2 |
identifier:CCE-78902-4
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-43 | identifier:CCE-78902-4 |
identifier:CCE-78912-3
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-45 | identifier:CCE-78912-3 |
| AWS | Low | lacework-global-44 | identifier:CCE-78912-3 |
identifier:CCE-78900-8
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-54 | identifier:CCE-78900-8 |
identifier:CCE-78915-6
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-56 | identifier:CCE-78915-6 |
identifier:CCE-78918-0
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-57 | identifier:CCE-78918-0 |
identifier:CCE-79186-3
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-41 | identifier:CCE-79186-3 |
identifier:CCE-78913-1
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-53 | identifier:CCE-78913-1 |
identifier:CCE-79187-1
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-58 | identifier:CCE-79187-1 |
identifier:CCE-79188-9
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-59 | identifier:CCE-79188-9 |
identifier:CCE-79189-7
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-60 | identifier:CCE-79189-7 |
identifier:CCE-79199-6
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-65 | identifier:CCE-79199-6 |
identifier:CCE-79190-5
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-61 | identifier:CCE-79190-5 |
identifier:CCE-79193-9
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-62 | identifier:CCE-79193-9 |
identifier:CCE-79197-0
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-63 | identifier:CCE-79197-0 |
identifier:CCE-79198-8
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-64 | identifier:CCE-79198-8 |
identifier:CCE-78911-5
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Critical | lacework-global-69 | identifier:CCE-78911-5 |
| AWS | Critical | lacework-global-35 | identifier:CCE-78911-5 |
identifier:CCE-78917-2
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-76 | identifier:CCE-78917-2 |
identifier:CCE-78919-8
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-78 | identifier:CCE-78919-8 |
identifier:CCE-79202-8
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-79 | identifier:CCE-79202-8 |
identifier:CCE-78920-6
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-77 | identifier:CCE-78920-6 |
identifier:CCE-78914-9
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-75 | identifier:CCE-78914-9 |
identifier:CCE-79191-3
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-82 | identifier:CCE-79191-3 |
identifier:CCE-79200-2
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-32 | identifier:CCE-79200-2 |
identifier:CCE-78910-7
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Critical | lacework-global-34 | identifier:CCE-78910-7 |
identifier:CCE-78907-3
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-37 | identifier:CCE-78907-3 |
identifier:CCE-78908-1
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-38 | identifier:CCE-78908-1 |
identifier:CCE-78901-6
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-39 | identifier:CCE-78901-6 |
control:1.1
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-31 | control:1.1 |
control:1.2
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-32 | control:1.2 |
control:1.3
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-33 | control:1.3 |
control:1.4
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Critical | lacework-global-34 | control:1.4 |
control:1.5
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Critical | lacework-global-35 | control:1.5 |
control:1.6
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Critical | lacework-global-69 | control:1.6 |
control:1.7
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-36 | control:1.7 |
control:1.8
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-37 | control:1.8 |
control:1.9
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-38 | control:1.9 |
control:1.10
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-39 | control:1.10 |
control:1.11
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-40 | control:1.11 |
control:1.12
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-41 | control:1.12 |
control:1.13
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-42 | control:1.13 |
control:1.14
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-43 | control:1.14 |
control:1.15
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-44 | control:1.15 |
control:1.16
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-45 | control:1.16 |
control:1.17
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-46 | control:1.17 |
control:1.18
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-70 | control:1.18 |
control:1.19
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-47 | control:1.19 |
control:1.20
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-48 | control:1.20 |
control:1.21
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-71 | control:1.21 |
control:2.1.1
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-72 | control:2.1.1 |
control:2.1.2
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-73 | control:2.1.2 |
control:2.1.3
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-49 | control:2.1.3 |
control:2.1.4
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-74 | control:2.1.4 |
control:2.1.5
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-50 | control:2.1.5 |
control:2.2.1
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-51 | control:2.2.1 |
control:2.3.1
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-52 | control:2.3.1 |
control:3.1
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-53 | control:3.1 |
control:3.2
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-75 | control:3.2 |
control:3.3
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-54 | control:3.3 |
control:3.4
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-55 | control:3.4 |
control:3.5
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-76 | control:3.5 |
control:3.6
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-56 | control:3.6 |
control:3.7
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-77 | control:3.7 |
control:3.8
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-78 | control:3.8 |
control:3.9
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-79 | control:3.9 |
control:3.10
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-80 | control:3.10 |
control:3.11
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-81 | control:3.11 |
control:4.1
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-57 | control:4.1 |
control:4.2
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-58 | control:4.2 |
control:4.3
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-59 | control:4.3 |
control:4.4
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-60 | control:4.4 |
control:4.5
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-61 | control:4.5 |
control:4.6
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-82 | control:4.6 |
control:4.7
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-83 | control:4.7 |
control:4.8
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-62 | control:4.8 |
control:4.9
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-84 | control:4.9 |
control:4.10
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-85 | control:4.10 |
control:4.11
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-86 | control:4.11 |
control:4.12
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-63 | control:4.12 |
control:4.13
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-64 | control:4.13 |
control:4.14
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Medium | lacework-global-65 | control:4.14 |
control:4.15
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | Low | lacework-global-66 | control:4.15 |
control:5.1
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-67 | control:5.1 |
control:5.2
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-68 | control:5.2 |
control:5.3
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-87 | control:5.3 |
control:5.4
| Domain | Severity | Policy ID | Tag |
|---|
| AWS | High | lacework-global-88 | control:5.4 |