[ { "message": "Function encryption status reports enabled controls", "metadata": { "event_code": "Function encryption status reports enabled controls", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN02", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"serverless-computing\"\n✓ I refer to \"{result}\" as \"svc\"\n✓ I call \"{svc}\" with \"GetFunctionEncryptionStatus\" using argument \"{uid}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"encryption\"\n✓ I attach \"{encryption}\" to the test output as \"Function Encryption Status\"\n✗ \"{encryption.EnvEncrypted}\" is \"true\" - Error: expected {encryption.EnvEncrypted} to equal 'true', got 'false'", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN02.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625174, "created_time_dt": "2026-06-16T15:52:54Z", "desc": "Compliance test scenario: Function encryption status reports enabled controls", "title": "Function encryption status reports enabled controls", "types": [], "uid": "ccc-test-26-1781625174" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625174, "time_dt": "2026-06-16T15:52:54Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "gcp", "region": "us-central1", "data": { "details": " service on :", "metadata": { "name": "finos-ccc-integration-fn-main", "status": "ACTIVE", "findings": [], "tags": [], "type": "serverless-computing", "region": "us-central1" } }, "group": { "name": "serverless-computing" }, "name": "finos-ccc-integration-fn-main", "type": "serverless-computing", "uid": "finos-ccc-integration-fn-main" } ] }, { "message": "Private invoke path succeeds", "metadata": { "event_code": "Private invoke path succeeds", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.SvlsComp", "@CCC.SvlsComp.CN01", "@PerService", "@tlp-amber", "@tlp-red", "@Behavioural", "@serverless-computing", "@SANITY", "@OPT_IN" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"serverless-computing\"\n✓ I refer to \"{result}\" as \"svc\"\n✓ I call \"{svc}\" with \"AttemptPrivateInvoke\" using argument \"{uid}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"privateInvoke\"\n✓ \"{privateInvoke.Invoked}\" is \"true\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.SvlsComp.CN01.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625174, "created_time_dt": "2026-06-16T15:52:54Z", "desc": "Compliance test scenario: Private invoke path succeeds", "title": "Private invoke path succeeds", "types": [], "uid": "ccc-test-71-1781625174" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625174, "time_dt": "2026-06-16T15:52:54Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "gcp", "region": "us-central1", "data": { "details": " service on :", "metadata": { "name": "finos-ccc-integration-fn-main", "status": "ACTIVE", "findings": [], "tags": [], "type": "serverless-computing", "region": "us-central1" } }, "group": { "name": "serverless-computing" }, "name": "finos-ccc-integration-fn-main", "type": "serverless-computing", "uid": "finos-ccc-integration-fn-main" } ] }, { "message": "No public invoke surface is configured", "metadata": { "event_code": "No public invoke surface is configured", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.SvlsComp", "@CCC.SvlsComp.CN01", "@PerService", "@tlp-amber", "@tlp-red", "@Behavioural", "@serverless-computing", "@MAIN" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"serverless-computing\"\n✓ I refer to \"{result}\" as \"svc\"\n✓ I call \"{svc}\" with \"GetInvokeEndpointExposure\" using argument \"{uid}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"exposure\"\n✓ I attach \"{exposure}\" to the test output as \"Invoke Endpoint Exposure\"\n✓ \"{exposure.PublicEndpointConfigured}\" is \"false\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.SvlsComp.CN01.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625174, "created_time_dt": "2026-06-16T15:52:54Z", "desc": "Compliance test scenario: No public invoke surface is configured", "title": "No public invoke surface is configured", "types": [], "uid": "ccc-test-80-1781625174" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625174, "time_dt": "2026-06-16T15:52:54Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "gcp", "region": "us-central1", "data": { "details": " service on :", "metadata": { "name": "finos-ccc-integration-fn-main", "status": "ACTIVE", "findings": [], "tags": [], "type": "serverless-computing", "region": "us-central1" } }, "group": { "name": "serverless-computing" }, "name": "finos-ccc-integration-fn-main", "type": "serverless-computing", "uid": "finos-ccc-integration-fn-main" } ] }, { "message": "Public internet invoke attempt is denied", "metadata": { "event_code": "Public internet invoke attempt is denied", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.SvlsComp", "@CCC.SvlsComp.CN01", "@PerService", "@tlp-amber", "@tlp-red", "@Behavioural", "@serverless-computing", "@MAIN", "@OPT_IN" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"serverless-computing\"\n✓ I refer to \"{result}\" as \"svc\"\n✓ I call \"{svc}\" with \"AttemptPublicInternetInvoke\" using argument \"{uid}\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: no public invoke URL available (set public-invoke-url or expose function with ALLOW_ALL ingress)\n⊘ I refer to \"{result}\" as \"publicInvoke\" (skipped)\n⊘ I attach \"{publicInvoke}\" to the test output as \"Public Invoke Attempt\" (skipped)\n⊘ \"{publicInvoke.AccessDenied}\" is \"true\" (skipped)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.SvlsComp.CN01.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625174, "created_time_dt": "2026-06-16T15:52:54Z", "desc": "Compliance test scenario: Public internet invoke attempt is denied", "title": "Public internet invoke attempt is denied", "types": [], "uid": "ccc-test-89-1781625174" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625174, "time_dt": "2026-06-16T15:52:54Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "gcp", "region": "us-central1", "data": { "details": " service on :", "metadata": { "name": "finos-ccc-integration-fn-main", "status": "ACTIVE", "findings": [], "tags": [], "type": "serverless-computing", "region": "us-central1" } }, "group": { "name": "serverless-computing" }, "name": "finos-ccc-integration-fn-main", "type": "serverless-computing", "uid": "finos-ccc-integration-fn-main" } ] }, { "message": "Invocations beyond threshold are throttled", "metadata": { "event_code": "Invocations beyond threshold are throttled", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.SvlsComp", "@CCC.SvlsComp.CN02", "@PerService", "@tlp-amber", "@tlp-red", "@Behavioural", "@Destructive", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"serverless-computing\"\n✓ I refer to \"{result}\" as \"svc\"\n✓ I call \"{svc}\" with \"InvokeFunctionBurst\" using arguments \"{uid}\" and \"{rate-limit-threshold}\"\n✗ \"{result}\" is not an error - Error: expected {result} to not be an error, but got: no invoke URL available for function \n⊘ I refer to \"{result}\" as \"withinThreshold\" (skipped)\n⊘ \"{withinThreshold.AllSucceeded}\" is \"true\" (skipped)\n⊘ I call \"{svc}\" with \"InvokeFunctionBurst\" using arguments \"{uid}\" and \"{burst-overrun}\" (skipped)\n⊘ \"{result}\" is not an error (skipped)\n⊘ I refer to \"{result}\" as \"overrun\" (skipped)\n⊘ I attach \"{overrun}\" to the test output as \"Invocation Burst Overrun\" (skipped)\n? \"{overrun.ThrottledCount}\" is greater than \"{0}\" (undefined)", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.SvlsComp.CN02.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625174, "created_time_dt": "2026-06-16T15:52:54Z", "desc": "Compliance test scenario: Invocations beyond threshold are throttled", "title": "Invocations beyond threshold are throttled", "types": [], "uid": "ccc-test-124-1781625174" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625174, "time_dt": "2026-06-16T15:52:54Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "gcp", "region": "us-central1", "data": { "details": " service on :", "metadata": { "name": "finos-ccc-integration-fn-main", "status": "ACTIVE", "findings": [], "tags": [], "type": "serverless-computing", "region": "us-central1" } }, "group": { "name": "serverless-computing" }, "name": "finos-ccc-integration-fn-main", "type": "serverless-computing", "uid": "finos-ccc-integration-fn-main" } ] }, { "message": "MFA requirement for destructive operations cannot be tested automatically - NotTestable", "metadata": { "event_code": "MFA requirement for destructive operations cannot be tested automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN03", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage", "@load-balancer", "@virtual-machines", "@serverless-computing", "@NotTestable" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN03.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625174, "created_time_dt": "2026-06-16T15:52:54Z", "desc": "Compliance test scenario: MFA requirement for destructive operations cannot be tested automatically - NotTestable", "title": "MFA requirement for destructive operations cannot be tested automatically - NotTestable", "types": [], "uid": "ccc-test-494-1781625174" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625174, "time_dt": "2026-06-16T15:52:54Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "gcp", "region": "us-central1", "data": { "details": " service on :", "metadata": { "name": "finos-ccc-integration-fn-main", "status": "ACTIVE", "findings": [], "tags": [], "type": "serverless-computing", "region": "us-central1" } }, "group": { "name": "serverless-computing" }, "name": "finos-ccc-integration-fn-main", "type": "serverless-computing", "uid": "finos-ccc-integration-fn-main" } ] }, { "message": "Verify admin actions are logged with identity and timestamp", "metadata": { "event_code": "Verify admin actions are logged with identity and timestamp", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN04", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"logging\"\n✓ I refer to \"{result}\" as \"loggingService\"\n✓ I call \"{theService}\" with \"UpdateResourcePolicy\"\n✓ \"{result}\" is not an error\n✓ I attach \"{result}\" to the test output as \"Policy Update Result\"\n✓ we wait for a period of \"10000\" ms\n✓ I call \"{loggingService}\" with \"QueryLogs\" using arguments \"{resource-name}\", \"admin\", and \"{20}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"adminLogs\"\n✓ I attach \"{adminLogs}\" to the test output as \"Admin Activity Logs\"\n✗ \"{adminLogs}\" is an array of objects with at least the following contents - Error: expected row not found: map[result:Succeeded]", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN04.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625174, "created_time_dt": "2026-06-16T15:52:54Z", "desc": "Compliance test scenario: Verify admin actions are logged with identity and timestamp", "title": "Verify admin actions are logged with identity and timestamp", "types": [], "uid": "ccc-test-537-1781625174" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625174, "time_dt": "2026-06-16T15:52:54Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "gcp", "region": "us-central1", "data": { "details": " service on :", "metadata": { "name": "finos-ccc-integration-fn-main", "status": "ACTIVE", "findings": [], "tags": [], "type": "serverless-computing", "region": "us-central1" } }, "group": { "name": "serverless-computing" }, "name": "finos-ccc-integration-fn-main", "type": "serverless-computing", "uid": "finos-ccc-integration-fn-main" } ] }, { "message": "Verify data modifications are logged with identity and timestamp", "metadata": { "event_code": "Verify data modifications are logged with identity and timestamp", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN04", "@PerService", "@tlp-amber", "@tlp-red", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"logging\"\n✓ I refer to \"{result}\" as \"loggingService\"\n✓ I call \"{theService}\" with \"TriggerDataWrite\" using argument \"{resource-name}\"\n✓ I attach \"{result}\" to the test output as \"Data Write Trigger Result\"\n✓ we wait for a period of \"10000\" ms\n✓ I call \"{loggingService}\" with \"QueryLogs\" using arguments \"{resource-name}\", \"data-write\", and \"{20}\"\n✓ I refer to \"{result}\" as \"dataLogs\"\n✓ I attach \"{dataLogs}\" to the test output as \"Data Write Logs\"\n✗ \"{dataLogs}\" is an array of objects with at least the following contents - Error: expected row not found: map[result:Succeeded]", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN04.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625186, "created_time_dt": "2026-06-16T15:53:06Z", "desc": "Compliance test scenario: Verify data modifications are logged with identity and timestamp", "title": "Verify data modifications are logged with identity and timestamp", "types": [], "uid": "ccc-test-575-1781625186" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625186, "time_dt": "2026-06-16T15:53:06Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "gcp", "region": "us-central1", "data": { "details": " service on :", "metadata": { "name": "finos-ccc-integration-fn-main", "status": "ACTIVE", "findings": [], "tags": [], "type": "serverless-computing", "region": "us-central1" } }, "group": { "name": "serverless-computing" }, "name": "finos-ccc-integration-fn-main", "type": "serverless-computing", "uid": "finos-ccc-integration-fn-main" } ] }, { "message": "Verify data read operations are logged with identity and timestamp", "metadata": { "event_code": "Verify data read operations are logged with identity and timestamp", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN04", "@PerService", "@tlp-red", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"logging\"\n✓ I refer to \"{result}\" as \"loggingService\"\n✓ I call \"{theService}\" with \"TriggerDataRead\" using argument \"{resource-name}\"\n✓ I attach \"{result}\" to the test output as \"Data Read Trigger Result\"\n✓ we wait for a period of \"10000\" ms\n✓ I call \"{loggingService}\" with \"QueryLogs\" using arguments \"{resource-name}\", \"data-read\", and \"{20}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"readLogs\"\n✓ I attach \"{readLogs}\" to the test output as \"Data Read Logs\"\n✗ \"{readLogs}\" is an array of objects with at least the following contents - Error: expected row not found: map[result:Succeeded]", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN04.AR03" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625197, "created_time_dt": "2026-06-16T15:53:17Z", "desc": "Compliance test scenario: Verify data read operations are logged with identity and timestamp", "title": "Verify data read operations are logged with identity and timestamp", "types": [], "uid": "ccc-test-614-1781625197" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625197, "time_dt": "2026-06-16T15:53:17Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "gcp", "region": "us-central1", "data": { "details": " service on :", "metadata": { "name": "finos-ccc-integration-fn-main", "status": "ACTIVE", "findings": [], "tags": [], "type": "serverless-computing", "region": "us-central1" } }, "group": { "name": "serverless-computing" }, "name": "finos-ccc-integration-fn-main", "type": "serverless-computing", "uid": "finos-ccc-integration-fn-main" } ] }, { "message": "Service prevents data read by user with no access", "metadata": { "event_code": "Service prevents data read by user with no access", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN05", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Destructive", "@Behavioural", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPIWithIdentity\" using arguments \"{service-type}\" and \"test-user-no-access\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"userReadableService\"\n✓ I call \"{userReadableService}\" with \"TriggerDataRead\" using argument \"{resource-name}\"\n✓ \"{result}\" is an error\n✓ I attach \"{result}\" to the test output as \"no-access-trigger-data-read-error.txt\"", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN05.AR06" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625207, "created_time_dt": "2026-06-16T15:53:27Z", "desc": "Compliance test scenario: Service prevents data read by user with no access", "title": "Service prevents data read by user with no access", "types": [], "uid": "ccc-test-642-1781625207" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625207, "time_dt": "2026-06-16T15:53:27Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "gcp", "region": "us-central1", "data": { "details": " service on :", "metadata": { "name": "finos-ccc-integration-fn-main", "status": "ACTIVE", "findings": [], "tags": [], "type": "serverless-computing", "region": "us-central1" } }, "group": { "name": "serverless-computing" }, "name": "finos-ccc-integration-fn-main", "type": "serverless-computing", "uid": "finos-ccc-integration-fn-main" } ] }, { "message": "Enumeration event publishing cannot be tested automatically - NotTestable", "metadata": { "event_code": "Enumeration event publishing cannot be tested automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN07", "@PerService", "@tlp-amber", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN07.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625208, "created_time_dt": "2026-06-16T15:53:28Z", "desc": "Compliance test scenario: Enumeration event publishing cannot be tested automatically - NotTestable", "title": "Enumeration event publishing cannot be tested automatically - NotTestable", "types": [], "uid": "ccc-test-659-1781625208" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625208, "time_dt": "2026-06-16T15:53:28Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "gcp", "region": "us-central1", "data": { "details": " service on :", "metadata": { "name": "finos-ccc-integration-fn-main", "status": "ACTIVE", "findings": [], "tags": [], "type": "serverless-computing", "region": "us-central1" } }, "group": { "name": "serverless-computing" }, "name": "finos-ccc-integration-fn-main", "type": "serverless-computing", "uid": "finos-ccc-integration-fn-main" } ] }, { "message": "Enumeration logging cannot be verified automatically - NotTestable", "metadata": { "event_code": "Enumeration logging cannot be verified automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN07", "@PerService", "@tlp-amber", "@tlp-clear", "@tlp-green", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN07.AR02" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625208, "created_time_dt": "2026-06-16T15:53:28Z", "desc": "Compliance test scenario: Enumeration logging cannot be verified automatically - NotTestable", "title": "Enumeration logging cannot be verified automatically - NotTestable", "types": [], "uid": "ccc-test-678-1781625208" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625208, "time_dt": "2026-06-16T15:53:28Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "gcp", "region": "us-central1", "data": { "details": " service on :", "metadata": { "name": "finos-ccc-integration-fn-main", "status": "ACTIVE", "findings": [], "tags": [], "type": "serverless-computing", "region": "us-central1" } }, "group": { "name": "serverless-computing" }, "name": "finos-ccc-integration-fn-main", "type": "serverless-computing", "uid": "finos-ccc-integration-fn-main" } ] }, { "message": "Replication destination trust cannot be verified automatically - NotTestable", "metadata": { "event_code": "Replication destination trust cannot be verified automatically - NotTestable", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN10", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@NotTestable", "@object-storage", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 1, "severity": "Informational", "status": "New", "status_code": "PASS", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ no-op required", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN10.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625208, "created_time_dt": "2026-06-16T15:53:28Z", "desc": "Compliance test scenario: Replication destination trust cannot be verified automatically - NotTestable", "title": "Replication destination trust cannot be verified automatically - NotTestable", "types": [], "uid": "ccc-test-696-1781625208" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625208, "time_dt": "2026-06-16T15:53:28Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "gcp", "region": "us-central1", "data": { "details": " service on :", "metadata": { "name": "finos-ccc-integration-fn-main", "status": "ACTIVE", "findings": [], "tags": [], "type": "serverless-computing", "region": "us-central1" } }, "group": { "name": "serverless-computing" }, "name": "finos-ccc-integration-fn-main", "type": "serverless-computing", "uid": "finos-ccc-integration-fn-main" } ] }, { "message": "Resource region can be retrieved for compliance verification", "metadata": { "event_code": "Resource region can be retrieved for compliance verification", "product": { "name": "CCC-Complete (Behavioural)", "uid": "CCC-Complete (Behavioural)", "vendor_name": "FINOS", "version": "0.1" }, "profiles": [ "@CCC.Core", "@CCC.Core.CN06", "@PerService", "@tlp-amber", "@tlp-green", "@tlp-red", "@Behavioural", "@object-storage", "@vpc", "@virtual-machines", "@serverless-computing" ], "version": "1.4.0" }, "severity_id": 3, "severity": "Medium", "status": "New", "status_code": "FAIL", "status_detail": "✓ a cloud api for \"{config}\" in \"api\"\n✓ I call \"{api}\" with \"GetServiceAPI\" using argument \"{service-type}\"\n✓ I refer to \"{result}\" as \"theService\"\n✓ I call \"{theService}\" with \"GetResourceRegion\" using argument \"{resource-name}\"\n✓ \"{result}\" is not an error\n✓ I refer to \"{result}\" as \"region\"\n✓ I attach \"{region}\" to the test output as \"Resource Region\"\n✗ \"{permitted-regions}\" is an array of objects with at least the following contents - Error: expected row not found: map[value:{region}]", "status_id": 1, "unmapped": { "compliance": { "CCC": [ "CCC.Core.CN06.AR01" ] } }, "activity_name": "Test", "activity_id": 1, "finding_info": { "created_time": 1781625208, "created_time_dt": "2026-06-16T15:53:28Z", "desc": "Compliance test scenario: Resource region can be retrieved for compliance verification", "title": "Resource region can be retrieved for compliance verification", "types": [], "uid": "ccc-test-728-1781625208" }, "category_name": "Findings", "category_uid": 2, "class_name": "Compliance Finding", "class_uid": 2004, "time": 1781625208, "time_dt": "2026-06-16T15:53:28Z", "type_uid": 200401, "type_name": "Compliance Finding: Test", "resources": [ { "cloud_partition": "gcp", "region": "us-central1", "data": { "details": " service on :", "metadata": { "name": "finos-ccc-integration-fn-main", "status": "ACTIVE", "findings": [], "tags": [], "type": "serverless-computing", "region": "us-central1" } }, "group": { "name": "serverless-computing" }, "name": "finos-ccc-integration-fn-main", "type": "serverless-computing", "uid": "finos-ccc-integration-fn-main" } ] } ]