CCC-Complete (Behavioural) 0.1
Test results for this specific product, vendor, and version combination
| Vendor | FINOS |
| Product | CCC-Complete (Behavioural) |
| Version | 0.1 |
Download Raw Results
Download the original OCSF, Gemara, or HTML result files used to generate this page
Test Summary
Aggregate summary of all tests for this configuration result
| Resources In Configuration | 1 |
| Count of Tests | 4 |
| Passing Tests | 0 |
| Failing Tests | 4 |
| Catalogs Tested | CCC.VPC |
Control Catalog Summary
Summary of test results grouped by control catalog and resource
| Control Catalog | Resources | Total Tests | Passing | Failing | Tested Requirements | Missing Requirements | Unused Core Requirements |
|---|---|---|---|---|---|---|---|
| CCC.VPC | vpc-0bb401c645b96d16... | 4 | 0 | 4 | None |
Test Mapping Summary
Summary of test mappings showing how event codes map to test requirements
| Control Catalog | Test Requirement | Mapped Tests (Event Code | Total | Passing | Failing) |
|---|---|---|
| CCC.VPC | CCC.VPC.CN02.AR01 When a resource is created in a public subnet, that resource
MUST NOT be assigned an external IP address by default.
| Behavioural check (active): resource launched in public subnet is not assigned an external IP202 |
| CCC.VPC | CCC.VPC.CN04.AR01 When any network traffic goes to or from an interface in the VPC,
the service MUST capture and log all relevant information.
| Behavioral check (active): traffic produces flow log records202 |
Resource Summary
Summary of all resources mentioned in OCSF results
| Resource Name | Resource Type | Control Catalogs | Total Tests | Passing | Failing |
|---|---|---|---|---|---|
vpc-0bb401c645b96d16b | vpc | CCC.VPC | 4 | 0 | 4 |
Test Results
OCSF test results filtered for entries with CCC compliance mappings
| Status | Finding | Resource Name | Resource Type | Message | Test Requirements |
|---|---|---|---|---|---|
| FAIL | Behavioural check (active): resource launched in public subnet is not assigned an external IP ✓ a cloud api for "{config}" in "api"
✓ I call "{api}" with "GetServiceAPI" using argument "vpc"
✓ I refer to "{result}" as "vpcService"
✓ I refer to "{uid}" as "TargetVpcId"
✓ I call "{vpcService}" with "SelectPublicSubnetForTest" using argument "{TargetVpcId}"
✓ I refer to "{result.SubnetId}" as "TestSubnetId"
✓ I call "{vpcService}" with "CreateTestResourceInSubnet" using argument "{TestSubnetId}"
✓ I refer to "{result.ResourceId}" as "TestResourceId"
✓ I call "{vpcService}" with "GetResourceExternalIpAssignment" using argument "{TestResourceId}"
✓ I refer to "{result.HasExternalIp}" as "HasExternalIp"
✓ "{HasExternalIp}" is false
✓ I call "{vpcService}" with "DeleteTestResource" using argument "{TestResourceId}"
✗ "{result.Deleted}" is true - Error: expected {result.Deleted} to be truthy, got <nil> (type: <nil>) | vpc-0bb401c645b96d16b | vpc | Behavioural check (active): resource launched in public subnet is not assigned an external IP | |
| FAIL | Behavioral check (active): traffic produces flow log records ✓ a cloud api for "{config}" in "api"
✓ I call "{api}" with "GetServiceAPI" using argument "vpc"
✓ I refer to "{result}" as "vpcService"
✓ I call "{api}" with "GetServiceAPI" using argument "logging"
✓ I refer to "{result}" as "loggingService"
✓ I refer to "{uid}" as "TargetVpcId"
✓ I call "{vpcService}" with "GenerateTestTraffic" using argument "{TargetVpcId}"
✓ I refer to "{result.ResourceId}" as "TestResourceId"
✓ I refer to "{result.CleanupDeleted}" as "TrafficCleanupDeleted"
✓ we wait for a period of "60000" ms
✓ I call "{loggingService}" with "QueryLogs" using arguments "{TargetVpcId}", "flow", and "{20}"
✓ "{result}" is not an error
✓ I refer to "{result}" as "FlowLogRecords"
✓ I attach "{FlowLogRecords}" to the test output as "Flow Log Records"
✗ "{TrafficCleanupDeleted}" is true - Error: expected {TrafficCleanupDeleted} to be truthy, got <nil> (type: <nil>)
⊘ "{FlowLogRecords}" is an array of objects with at least the following contents (skipped) | vpc-0bb401c645b96d16b | vpc | Behavioral check (active): traffic produces flow log records | |
| FAIL | Behavioural check (active): resource launched in public subnet is not assigned an external IP ✓ a cloud api for "{config}" in "api"
✓ I call "{api}" with "GetServiceAPI" using argument "vpc"
✓ I refer to "{result}" as "vpcService"
✓ I refer to "{uid}" as "TargetVpcId"
✓ I call "{vpcService}" with "SelectPublicSubnetForTest" using argument "{TargetVpcId}"
✓ I refer to "{result.SubnetId}" as "TestSubnetId"
✓ I call "{vpcService}" with "CreateTestResourceInSubnet" using argument "{TestSubnetId}"
✓ I refer to "{result.ResourceId}" as "TestResourceId"
✓ I call "{vpcService}" with "GetResourceExternalIpAssignment" using argument "{TestResourceId}"
✓ I refer to "{result.HasExternalIp}" as "HasExternalIp"
✓ "{HasExternalIp}" is false
✓ I call "{vpcService}" with "DeleteTestResource" using argument "{TestResourceId}"
✗ "{result.Deleted}" is true - Error: expected {result.Deleted} to be truthy, got <nil> (type: <nil>) | vpc-0bb401c645b96d16b | vpc | Behavioural check (active): resource launched in public subnet is not assigned an external IP | |
| FAIL | Behavioral check (active): traffic produces flow log records ✓ a cloud api for "{config}" in "api"
✓ I call "{api}" with "GetServiceAPI" using argument "vpc"
✓ I refer to "{result}" as "vpcService"
✓ I call "{api}" with "GetServiceAPI" using argument "logging"
✓ I refer to "{result}" as "loggingService"
✓ I refer to "{uid}" as "TargetVpcId"
✓ I call "{vpcService}" with "GenerateTestTraffic" using argument "{TargetVpcId}"
✓ I refer to "{result.ResourceId}" as "TestResourceId"
✓ I refer to "{result.CleanupDeleted}" as "TrafficCleanupDeleted"
✓ we wait for a period of "60000" ms
✓ I call "{loggingService}" with "QueryLogs" using arguments "{TargetVpcId}", "flow", and "{20}"
✓ "{result}" is not an error
✓ I refer to "{result}" as "FlowLogRecords"
✓ I attach "{FlowLogRecords}" to the test output as "Flow Log Records"
✗ "{TrafficCleanupDeleted}" is true - Error: expected {TrafficCleanupDeleted} to be truthy, got <nil> (type: <nil>)
⊘ "{FlowLogRecords}" is an array of objects with at least the following contents (skipped) | vpc-0bb401c645b96d16b | vpc | Behavioral check (active): traffic produces flow log records |