[ { "message": "VM attached volumes report encryption enabled", "metadata": { "event_code": "VM attached volumes report encryption enabled", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN02", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"virtual-machines\"\n✓ I refer to \"{result}\" as \"vmService\"\n✓ I call \"{vmService}\" with \"GetVolumeEncryptionStatus\" using argument \"{uid}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"encryption\"\n✓ I attach \"{encryption}\" to the test output as \"Volume Encryption Status\"\n✓ \"{encryption.Volumes}\" is an array of objects with at least the following contents", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN02.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148179, "created_time_dt": "2026-06-22T17:09:39Z", "desc": "Compliance test scenario: VM attached volumes report encryption enabled", "title": "VM attached volumes report encryption enabled", "types": [], "uid": "ccc-test-28-1782148179" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148179, "time_dt": "2026-06-22T17:09:39Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Unauthorized inbound connection attempt is denied", "metadata": { "event_code": "Unauthorized inbound connection attempt is denied", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN12", "@PerService", "@tlp-amber", "@tlp-red", "@Behavioural", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"virtual-machines\"\n✓ I refer to \"{result}\" as \"vmService\"\n✓ I call \"{vmService}\" with \"AttemptInboundConnection\" using arguments \"{uid}\" and \"{test-listener-port}\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: hostName is required for inbound connection checks\n⊘ I refer to \"{result}\" as \"probe\" (skipped)\n⊘ I attach \"{probe}\" to the test output as \"Inbound Connection Probe\" (skipped)\n⊘ \"{probe.Connected}\" is \"false\" (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN12.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148179, "created_time_dt": "2026-06-22T17:09:39Z", "desc": "Compliance test scenario: Unauthorized inbound connection attempt is denied", "title": "Unauthorized inbound connection attempt is denied", "types": [], "uid": "ccc-test-54-1782148179" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148179, "time_dt": "2026-06-22T17:09:39Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Service accepts TLS 1.3 encrypted traffic", "metadata": { "event_code": "Service accepts TLS 1.3 encrypted traffic", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ an openssl s_client request using \"tls1_3\" to \"{port-number}\" on \"{host-name}\" protocol \"{protocol}\"\n✓ I refer to \"{result}\" as \"connection\"\n✓ \"{connection}\" state is open\n✓ \"{connection.State}\" is \"open\"\n✓ I close connection \"{connection}\"\n✓ \"{connection}\" state is closed", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148179, "created_time_dt": "2026-06-22T17:09:39Z", "desc": "Compliance test scenario: Service accepts TLS 1.3 encrypted traffic", "title": "Service accepts TLS 1.3 encrypted traffic", "types": [], "uid": "ccc-test-153-1782148179" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148179, "time_dt": "2026-06-22T17:09:39Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Service rejects TLS 1.2 traffic", "metadata": { "event_code": "Service rejects TLS 1.2 traffic", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ an openssl s_client request using \"tls1_2\" to \"{port-number}\" on \"{host-name}\" protocol \"{protocol}\"\n✓ I refer to \"{result}\" as \"connection\"\n✓ we wait for a period of \"40\" ms\n✓ \"{connection.State}\" is \"closed\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148179, "created_time_dt": "2026-06-22T17:09:39Z", "desc": "Compliance test scenario: Service rejects TLS 1.2 traffic", "title": "Service rejects TLS 1.2 traffic", "types": [], "uid": "ccc-test-159-1782148179" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148179, "time_dt": "2026-06-22T17:09:39Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Service rejects TLS 1.1 traffic", "metadata": { "event_code": "Service rejects TLS 1.1 traffic", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ an openssl s_client request using \"tls1_1\" to \"{port-number}\" on \"{host-name}\" protocol \"{protocol}\"\n✓ I refer to \"{result}\" as \"connection\"\n✓ we wait for a period of \"40\" ms\n✓ \"{connection.State}\" is \"closed\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148179, "created_time_dt": "2026-06-22T17:09:39Z", "desc": "Compliance test scenario: Service rejects TLS 1.1 traffic", "title": "Service rejects TLS 1.1 traffic", "types": [], "uid": "ccc-test-165-1782148179" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148179, "time_dt": "2026-06-22T17:09:39Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Service rejects TLS 1.0 traffic", "metadata": { "event_code": "Service rejects TLS 1.0 traffic", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ an openssl s_client request using \"tls1\" to \"{port-number}\" on \"{host-name}\" protocol \"{protocol}\"\n✓ I refer to \"{result}\" as \"connection\"\n✓ we wait for a period of \"40\" ms\n✓ \"{connection.State}\" is \"closed\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148179, "created_time_dt": "2026-06-22T17:09:39Z", "desc": "Compliance test scenario: Service rejects TLS 1.0 traffic", "title": "Service rejects TLS 1.0 traffic", "types": [], "uid": "ccc-test-171-1782148179" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148179, "time_dt": "2026-06-22T17:09:39Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Verify SSL/TLS protocol support", "metadata": { "event_code": "Verify SSL/TLS protocol support", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✗ \"report\" contains details of SSL Support type \"protocols\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_protocols__22.json: no such file or directory\n⊘ \"{report}\" is an array of objects which doesn't contain any of (skipped)\n⊘ \"{report}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148179, "created_time_dt": "2026-06-22T17:09:39Z", "desc": "Compliance test scenario: Verify SSL/TLS protocol support", "title": "Verify SSL/TLS protocol support", "types": [], "uid": "ccc-test-176-1782148179" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148179, "time_dt": "2026-06-22T17:09:39Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Verify no known SSL/TLS vulnerabilities", "metadata": { "event_code": "Verify no known SSL/TLS vulnerabilities", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✗ \"report\" contains details of SSL Support type \"vulnerable\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_vulnerable__22.json: no such file or directory\n⊘ \"{report}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148179, "created_time_dt": "2026-06-22T17:09:39Z", "desc": "Compliance test scenario: Verify no known SSL/TLS vulnerabilities", "title": "Verify no known SSL/TLS vulnerabilities", "types": [], "uid": "ccc-test-180-1782148179" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148179, "time_dt": "2026-06-22T17:09:39Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Verify TLS 1.3 only certificate validity", "metadata": { "event_code": "Verify TLS 1.3 only certificate validity", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✗ \"report\" contains details of SSL Support type \"server-defaults\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_server-defaults__22.json: no such file or directory\n⊘ \"{report}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148179, "created_time_dt": "2026-06-22T17:09:39Z", "desc": "Compliance test scenario: Verify TLS 1.3 only certificate validity", "title": "Verify TLS 1.3 only certificate validity", "types": [], "uid": "ccc-test-184-1782148179" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148179, "time_dt": "2026-06-22T17:09:39Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Verify SSH protocol version", "metadata": { "event_code": "Verify SSH protocol version", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@tls", "@Behavioural", "@PerPort", "@ssh", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ an openssl s_client request to \"{port-number}\" on \"{host-name}\" protocol \"ssh\"\n✓ I refer to \"{result}\" as \"connection\"\n✓ \"{connection}\" state is open\n✓ I close connection \"{connection}\"\n✓ \"{connection}\" state is closed", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148179, "created_time_dt": "2026-06-22T17:09:39Z", "desc": "Compliance test scenario: Verify SSH protocol version", "title": "Verify SSH protocol version", "types": [], "uid": "ccc-test-228-1782148179" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148179, "time_dt": "2026-06-22T17:09:39Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Verify SSH uses strong ciphers", "metadata": { "event_code": "Verify SSH uses strong ciphers", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@tls", "@Behavioural", "@PerPort", "@ssh", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✗ \"report\" contains details of SSL Support type \"each-cipher\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_each-cipher__22.json: no such file or directory\n⊘ \"{report}\" is an array of objects which doesn't contain any of (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148179, "created_time_dt": "2026-06-22T17:09:39Z", "desc": "Compliance test scenario: Verify SSH uses strong ciphers", "title": "Verify SSH uses strong ciphers", "types": [], "uid": "ccc-test-231-1782148179" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148179, "time_dt": "2026-06-22T17:09:39Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Verify SSH server configuration", "metadata": { "event_code": "Verify SSH server configuration", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@tls", "@Behavioural", "@PerPort", "@ssh", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✗ \"report\" contains details of SSL Support type \"server-defaults\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_server-defaults__22.json: no such file or directory\n⊘ \"{report}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148179, "created_time_dt": "2026-06-22T17:09:39Z", "desc": "Compliance test scenario: Verify SSH server configuration", "title": "Verify SSH server configuration", "types": [], "uid": "ccc-test-234-1782148179" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148179, "time_dt": "2026-06-22T17:09:39Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "HTTP redirects to HTTPS", "metadata": { "event_code": "HTTP redirects to HTTPS", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@PerPort", "@Behavioural", "@http", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a client connects to \"{host-name}\" with protocol \"http\" on port \"80\"\n✓ I refer to \"{result}\" as \"connection\"\n✓ \"{connection}\" is not an error\n✓ I transmit \"GET / HTTP/1.1\\r\\nHost: {host-name}\\r\\n\\r\\n\" to \"{connection}\"\n✓ I attach \"{connection}\" to the test output as \"HTTP response\"\n✗ \"{connection.Output}\" contains \"301\" - Error: expected {connection.Output} to contain '301', but got ''\n⊘ I call \"{connection}\" with \"Close\" (skipped)\n⊘ \"{connection.State}\" is \"closed\" (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR03" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148179, "created_time_dt": "2026-06-22T17:09:39Z", "desc": "Compliance test scenario: HTTP redirects to HTTPS", "title": "HTTP redirects to HTTPS", "types": [], "uid": "ccc-test-296-1782148179" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148179, "time_dt": "2026-06-22T17:09:39Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "FTP traffic is blocked or not exposed", "metadata": { "event_code": "FTP traffic is blocked or not exposed", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@PerPort", "@Behavioural", "@ftp", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a client connects to \"{host-name}\" with protocol \"ftp\" on port \"21\"\n✓ I attach \"{connection}\" to the test output as \"FTP response\"\n✓ I refer to \"{result}\" as \"connection\"\n✗ \"{connection}\" is an error - Error: expected {connection} to be an error, got *cloud.Connection", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR03" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148180, "created_time_dt": "2026-06-22T17:09:40Z", "desc": "Compliance test scenario: FTP traffic is blocked or not exposed", "title": "FTP traffic is blocked or not exposed", "types": [], "uid": "ccc-test-301-1782148180" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148180, "time_dt": "2026-06-22T17:09:40Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Telnet traffic is blocked or not exposed", "metadata": { "event_code": "Telnet traffic is blocked or not exposed", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@PerPort", "@Behavioural", "@telnet", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a client connects to \"{host-name}\" with protocol \"telnet\" on port \"23\"\n✓ I attach \"{connection}\" to the test output as \"Telnet response\"\n✓ I refer to \"{result}\" as \"connection\"\n✗ \"{connection}\" is an error - Error: expected {connection} to be an error, got *cloud.Connection", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR03" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148180, "created_time_dt": "2026-06-22T17:09:40Z", "desc": "Compliance test scenario: Telnet traffic is blocked or not exposed", "title": "Telnet traffic is blocked or not exposed", "types": [], "uid": "ccc-test-306-1782148180" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148180, "time_dt": "2026-06-22T17:09:40Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Only secure protocols are exposed", "metadata": { "event_code": "Only secure protocols are exposed", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-green", "@tlp-red", "@PerPort", "@Behavioural", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✗ \"report\" contains details of SSL Support type \"protocols\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_protocols__22.json: no such file or directory\n⊘ \"{report}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR03" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148180, "created_time_dt": "2026-06-22T17:09:40Z", "desc": "Compliance test scenario: Only secure protocols are exposed", "title": "Only secure protocols are exposed", "types": [], "uid": "ccc-test-309-1782148180" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148180, "time_dt": "2026-06-22T17:09:40Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Verify HTTPS uses IANA-assigned port 443", "metadata": { "event_code": "Verify HTTPS uses IANA-assigned port 443", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@PerPort", "@http", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✗ \"{port-number}\" is \"443\" - Error: expected {port-number} to equal '443', got '22'", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR07" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148180, "created_time_dt": "2026-06-22T17:09:40Z", "desc": "Compliance test scenario: Verify HTTPS uses IANA-assigned port 443", "title": "Verify HTTPS uses IANA-assigned port 443", "types": [], "uid": "ccc-test-373-1782148180" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148180, "time_dt": "2026-06-22T17:09:40Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Verify mTLS requires client certificate authentication", "metadata": { "event_code": "Verify mTLS requires client certificate authentication", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN01", "@tlp-amber", "@tlp-red", "@tls", "@Behavioural", "@PerPort", "@tls", "@object-storage", "@virtual-machines" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✗ \"report\" contains details of SSL Support type \"server-defaults\" for \"{host-name}\" on port \"{port-number}\" - Error: failed to read testssl.sh output: open /tmp/testssl_server-defaults__22.json: no such file or directory\n⊘ \"{report}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN01.AR08" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148180, "created_time_dt": "2026-06-22T17:09:40Z", "desc": "Compliance test scenario: Verify mTLS requires client certificate authentication", "title": "Verify mTLS requires client certificate authentication", "types": [], "uid": "ccc-test-405-1782148180" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148180, "time_dt": "2026-06-22T17:09:40Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "MFA requirement for destructive operations cannot be tested automatically - NotTestable", "metadata": { "event_code": "MFA requirement for destructive operations cannot be tested automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN03", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage", "@load-balancer", "@virtual-machines", "@serverless-computing", "@NotTestable" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN03.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148180, "created_time_dt": "2026-06-22T17:09:40Z", "desc": "Compliance test scenario: MFA requirement for destructive operations cannot be tested automatically - NotTestable", "title": "MFA requirement for destructive operations cannot be tested automatically - NotTestable", "types": [], "uid": "ccc-test-424-1782148180" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148180, "time_dt": "2026-06-22T17:09:40Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Verify admin actions are logged with identity and timestamp", "metadata": { "event_code": "Verify admin actions are logged with identity and timestamp", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN04", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"logging\"\n✓ I refer to \"{result}\" as \"loggingService\"\n✓ I call \"{theService}\" with \"UpdateResourcePolicy\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"Policy Update Result\"\n✓ we wait for a period of \"10000\" ms\n✓ I call \"{loggingService}\" with \"QueryLogs\" using arguments \"{resource-name}\", \"admin\", and \"{20}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"adminLogs\"\n✓ I attach \"{adminLogs}\" to the test output as \"Admin Activity Logs\"\n✗ \"{adminLogs}\" is an array of objects with at least the following contents - Error: expected row not found: map[result:Succeeded]", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN04.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148180, "created_time_dt": "2026-06-22T17:09:40Z", "desc": "Compliance test scenario: Verify admin actions are logged with identity and timestamp", "title": "Verify admin actions are logged with identity and timestamp", "types": [], "uid": "ccc-test-467-1782148180" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148180, "time_dt": "2026-06-22T17:09:40Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Verify data modifications are logged with identity and timestamp", "metadata": { "event_code": "Verify data modifications are logged with identity and timestamp", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN04", "@PerService", "@tlp-amber", "@tlp-red", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"logging\"\n✓ I refer to \"{result}\" as \"loggingService\"\n✓ I call \"{theService}\" with \"TriggerDataWrite\" using argument \"{resource-name}\"\n✓ I attach \"{result}\" to the test output as \"Data Write Trigger Result\"\n✓ we wait for a period of \"10000\" ms\n✓ I call \"{loggingService}\" with \"QueryLogs\" using arguments \"{resource-name}\", \"data-write\", and \"{20}\"\n✓ I refer to \"{result}\" as \"dataLogs\"\n✓ I attach \"{dataLogs}\" to the test output as \"Data Write Logs\"\n✗ \"{dataLogs}\" is an array of objects with at least the following contents - Error: field {dataLogs} is not an array", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN04.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148191, "created_time_dt": "2026-06-22T17:09:51Z", "desc": "Compliance test scenario: Verify data modifications are logged with identity and timestamp", "title": "Verify data modifications are logged with identity and timestamp", "types": [], "uid": "ccc-test-505-1782148191" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148191, "time_dt": "2026-06-22T17:09:51Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Verify data read operations are logged with identity and timestamp", "metadata": { "event_code": "Verify data read operations are logged with identity and timestamp", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN04", "@PerService", "@tlp-red", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"logging\"\n✓ I refer to \"{result}\" as \"loggingService\"\n✓ I call \"{theService}\" with \"TriggerDataRead\" using argument \"{resource-name}\"\n✓ I attach \"{result}\" to the test output as \"Data Read Trigger Result\"\n✓ we wait for a period of \"10000\" ms\n✓ I call \"{loggingService}\" with \"QueryLogs\" using arguments \"{resource-name}\", \"data-read\", and \"{20}\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: azure-log-analytics-workspace-id is required to query data logs but is not set in config\n⊘ I refer to \"{result}\" as \"readLogs\" (skipped)\n⊘ I attach \"{readLogs}\" to the test output as \"Data Read Logs\" (skipped)\n⊘ \"{readLogs}\" is an array of objects with at least the following contents (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN04.AR03" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148201, "created_time_dt": "2026-06-22T17:10:01Z", "desc": "Compliance test scenario: Verify data read operations are logged with identity and timestamp", "title": "Verify data read operations are logged with identity and timestamp", "types": [], "uid": "ccc-test-544-1782148201" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148201, "time_dt": "2026-06-22T17:10:01Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Service prevents data read by user with no access", "metadata": { "event_code": "Service prevents data read by user with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"{service-type}\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userReadableService\"\n✓ I call \"{userReadableService}\" with \"TriggerDataRead\" using argument \"{resource-name}\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-trigger-data-read-error.txt\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR06" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148211, "created_time_dt": "2026-06-22T17:10:11Z", "desc": "Compliance test scenario: Service prevents data read by user with no access", "title": "Service prevents data read by user with no access", "types": [], "uid": "ccc-test-572-1782148211" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148211, "time_dt": "2026-06-22T17:10:11Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Enumeration event publishing cannot be tested automatically - NotTestable", "metadata": { "event_code": "Enumeration event publishing cannot be tested automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN07", "@PerService", "@tlp-amber", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN07.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148211, "created_time_dt": "2026-06-22T17:10:11Z", "desc": "Compliance test scenario: Enumeration event publishing cannot be tested automatically - NotTestable", "title": "Enumeration event publishing cannot be tested automatically - NotTestable", "types": [], "uid": "ccc-test-589-1782148211" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148211, "time_dt": "2026-06-22T17:10:11Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Enumeration logging cannot be verified automatically - NotTestable", "metadata": { "event_code": "Enumeration logging cannot be verified automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN07", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN07.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148211, "created_time_dt": "2026-06-22T17:10:11Z", "desc": "Compliance test scenario: Enumeration logging cannot be verified automatically - NotTestable", "title": "Enumeration logging cannot be verified automatically - NotTestable", "types": [], "uid": "ccc-test-608-1782148211" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148211, "time_dt": "2026-06-22T17:10:11Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Replication destination trust cannot be verified automatically - NotTestable", "metadata": { "event_code": "Replication destination trust cannot be verified automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN10", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN10.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148211, "created_time_dt": "2026-06-22T17:10:11Z", "desc": "Compliance test scenario: Replication destination trust cannot be verified automatically - NotTestable", "title": "Replication destination trust cannot be verified automatically - NotTestable", "types": [], "uid": "ccc-test-626-1782148211" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148211, "time_dt": "2026-06-22T17:10:11Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] }, { "message": "Resource region can be retrieved for compliance verification", "metadata": { "event_code": "Resource region can be retrieved for compliance verification", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN06", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage", "@vpc", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{theService}\" with \"GetResourceRegion\" using argument \"{resource-name}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"region\"\n✓ I attach \"{region}\" to the test output as \"Resource Region\"\n✗ \"{permitted-regions}\" is an array of objects with at least the following contents - Error: expected row not found: map[value:{region}]", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN06.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1782148211, "created_time_dt": "2026-06-22T17:10:11Z", "desc": "Compliance test scenario: Resource region can be retrieved for compliance verification", "title": "Resource region can be retrieved for compliance verification", "types": [], "uid": "ccc-test-658-1782148211" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1782148211, "time_dt": "2026-06-22T17:10:11Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "azure", "region": "westus2", "data": { "details": " service on :", "metadata": { "name": "avmvm20260611", "status": "ACTIVE", "findings": [], "tags": [], "type": "virtual-machines", "region": "westus2" } }, "group": { "name": "virtual-machines" }, "name": "avmvm20260611", "type": "virtual-machines", "uid": "avmvm20260611" } ] } ]