Skip to main content

Policy Tags

Lacework assigns custom attributes to policies to help identify and organize the alerts generated when a policy's violation occurs.

The following tables list all default policy tags.

security:compliance

DomainSeverityPolicy IDTag
AWSCriticallacework-global-69security:compliance
AWSCriticallacework-global-35security:compliance
AWSCriticallacework-global-34security:compliance
AWSHighlacework-global-88security:compliance
AWSHighlacework-global-87security:compliance
AWSHighlacework-global-78security:compliance
AWSHighlacework-global-77security:compliance
AWSHighlacework-global-76security:compliance
AWSHighlacework-global-68security:compliance
AWSHighlacework-global-67security:compliance
AWSHighlacework-global-56security:compliance
AWSHighlacework-global-54security:compliance
AWSHighlacework-global-47security:compliance
AWSHighlacework-global-45security:compliance
AWSHighlacework-global-42security:compliance
AWSHighlacework-global-39security:compliance
AWSMediumlacework-global-86security:compliance
AWSMediumlacework-global-85security:compliance
AWSMediumlacework-global-84security:compliance
AWSMediumlacework-global-83security:compliance
AWSMediumlacework-global-82security:compliance
AWSMediumlacework-global-81security:compliance
AWSMediumlacework-global-80security:compliance
AWSMediumlacework-global-79security:compliance
AWSMediumlacework-global-74security:compliance
AWSMediumlacework-global-73security:compliance
AWSMediumlacework-global-72security:compliance
AWSMediumlacework-global-71security:compliance
AWSMediumlacework-global-70security:compliance
AWSMediumlacework-global-65security:compliance
AWSMediumlacework-global-64security:compliance
AWSMediumlacework-global-63security:compliance
AWSMediumlacework-global-62security:compliance
AWSMediumlacework-global-60security:compliance
AWSMediumlacework-global-58security:compliance
AWSMediumlacework-global-57security:compliance
AWSMediumlacework-global-53security:compliance
AWSMediumlacework-global-52security:compliance
AWSMediumlacework-global-51security:compliance
AWSMediumlacework-global-50security:compliance
AWSMediumlacework-global-49security:compliance
AWSMediumlacework-global-48security:compliance
AWSMediumlacework-global-43security:compliance
AWSMediumlacework-global-41security:compliance
AWSMediumlacework-global-40security:compliance
AWSMediumlacework-global-37security:compliance
AWSLowlacework-global-75security:compliance
AWSLowlacework-global-66security:compliance
AWSLowlacework-global-61security:compliance
AWSLowlacework-global-59security:compliance
AWSLowlacework-global-38security:compliance
AWSLowlacework-global-36security:compliance
AWSLowlacework-global-33security:compliance
AWSLowlacework-global-32security:compliance
AWSLowlacework-global-31security:compliance

framework:cis-aws-1-4-0

DomainSeverityPolicy IDTag
AWSLowlacework-global-38framework:cis-aws-1-4-0
AWSLowlacework-global-36framework:cis-aws-1-4-0
AWSLowlacework-global-33framework:cis-aws-1-4-0
AWSLowlacework-global-32framework:cis-aws-1-4-0
AWSLowlacework-global-31framework:cis-aws-1-4-0

identifier:CCE-79201-0

DomainSeverityPolicy IDTag
AWSHighlacework-global-87identifier:CCE-79201-0

identifier:CCE-79192-1

DomainSeverityPolicy IDTag
AWSMediumlacework-global-83identifier:CCE-79192-14

identifier:CCE-79194-7

DomainSeverityPolicy IDTag
AWSMediumlacework-global-85identifier:CCE-79194-7

identifier:CCE-79195-4

DomainSeverityPolicy IDTag
AWSMediumlacework-global-84identifier:CCE-79195-4

identifier:CCE-79196-2

DomainSeverityPolicy IDTag
AWSMediumlacework-global-86identifier:CCE-79196-2

identifier:CCE-78902-4

DomainSeverityPolicy IDTag
AWSMediumlacework-global-43identifier:CCE-78902-4

identifier:CCE-78912-3

DomainSeverityPolicy IDTag
AWSHighlacework-global-45identifier:CCE-78912-3
AWSLowlacework-global-44identifier:CCE-78912-3

identifier:CCE-78900-8

DomainSeverityPolicy IDTag
AWSHighlacework-global-54identifier:CCE-78900-8

identifier:CCE-78915-6

DomainSeverityPolicy IDTag
AWSHighlacework-global-56identifier:CCE-78915-6

identifier:CCE-78918-0

DomainSeverityPolicy IDTag
AWSMediumlacework-global-57identifier:CCE-78918-0

identifier:CCE-79186-3

DomainSeverityPolicy IDTag
AWSMediumlacework-global-41identifier:CCE-79186-3

identifier:CCE-78913-1

DomainSeverityPolicy IDTag
AWSMediumlacework-global-53identifier:CCE-78913-1

identifier:CCE-79187-1

DomainSeverityPolicy IDTag
AWSMediumlacework-global-58identifier:CCE-79187-1

identifier:CCE-79188-9

DomainSeverityPolicy IDTag
AWSLowlacework-global-59identifier:CCE-79188-9

identifier:CCE-79189-7

DomainSeverityPolicy IDTag
AWSMediumlacework-global-60identifier:CCE-79189-7

identifier:CCE-79199-6

DomainSeverityPolicy IDTag
AWSMediumlacework-global-65identifier:CCE-79199-6

identifier:CCE-79190-5

DomainSeverityPolicy IDTag
AWSLowlacework-global-61identifier:CCE-79190-5

identifier:CCE-79193-9

DomainSeverityPolicy IDTag
AWSMediumlacework-global-62identifier:CCE-79193-9

identifier:CCE-79197-0

DomainSeverityPolicy IDTag
AWSMediumlacework-global-63identifier:CCE-79197-0

identifier:CCE-79198-8

DomainSeverityPolicy IDTag
AWSMediumlacework-global-64identifier:CCE-79198-8

identifier:CCE-78911-5

DomainSeverityPolicy IDTag
AWSCriticallacework-global-69identifier:CCE-78911-5
AWSCriticallacework-global-35identifier:CCE-78911-5

identifier:CCE-78917-2

DomainSeverityPolicy IDTag
AWSHighlacework-global-76identifier:CCE-78917-2

identifier:CCE-78919-8

DomainSeverityPolicy IDTag
AWSHighlacework-global-78identifier:CCE-78919-8

identifier:CCE-79202-8

DomainSeverityPolicy IDTag
AWSMediumlacework-global-79identifier:CCE-79202-8

identifier:CCE-78920-6

DomainSeverityPolicy IDTag
AWSHighlacework-global-77identifier:CCE-78920-6

identifier:CCE-78914-9

DomainSeverityPolicy IDTag
AWSLowlacework-global-75identifier:CCE-78914-9

identifier:CCE-79191-3

DomainSeverityPolicy IDTag
AWSMediumlacework-global-82identifier:CCE-79191-3

identifier:CCE-79200-2

DomainSeverityPolicy IDTag
AWSLowlacework-global-32identifier:CCE-79200-2

identifier:CCE-78910-7

DomainSeverityPolicy IDTag
AWSCriticallacework-global-34identifier:CCE-78910-7

identifier:CCE-78907-3

DomainSeverityPolicy IDTag
AWSMediumlacework-global-37identifier:CCE-78907-3

identifier:CCE-78908-1

DomainSeverityPolicy IDTag
AWSLowlacework-global-38identifier:CCE-78908-1

identifier:CCE-78901-6

DomainSeverityPolicy IDTag
AWSHighlacework-global-39identifier:CCE-78901-6

control:1.1

DomainSeverityPolicy IDTag
AWSLowlacework-global-31control:1.1

control:1.2

DomainSeverityPolicy IDTag
AWSLowlacework-global-32control:1.2

control:1.3

DomainSeverityPolicy IDTag
AWSLowlacework-global-33control:1.3

control:1.4

DomainSeverityPolicy IDTag
AWSCriticallacework-global-34control:1.4

control:1.5

DomainSeverityPolicy IDTag
AWSCriticallacework-global-35control:1.5

control:1.6

DomainSeverityPolicy IDTag
AWSCriticallacework-global-69control:1.6

control:1.7

DomainSeverityPolicy IDTag
AWSLowlacework-global-36control:1.7

control:1.8

DomainSeverityPolicy IDTag
AWSMediumlacework-global-37control:1.8

control:1.9

DomainSeverityPolicy IDTag
AWSLowlacework-global-38control:1.9

control:1.10

DomainSeverityPolicy IDTag
AWSHighlacework-global-39control:1.10

control:1.11

DomainSeverityPolicy IDTag
AWSMediumlacework-global-40control:1.11

control:1.12

DomainSeverityPolicy IDTag
AWSMediumlacework-global-41control:1.12

control:1.13

DomainSeverityPolicy IDTag
AWSHighlacework-global-42control:1.13

control:1.14

DomainSeverityPolicy IDTag
AWSMediumlacework-global-43control:1.14

control:1.15

DomainSeverityPolicy IDTag
AWSLowlacework-global-44control:1.15

control:1.16

DomainSeverityPolicy IDTag
AWSHighlacework-global-45control:1.16

control:1.17

DomainSeverityPolicy IDTag
AWSLowlacework-global-46control:1.17

control:1.18

DomainSeverityPolicy IDTag
AWSMediumlacework-global-70control:1.18

control:1.19

DomainSeverityPolicy IDTag
AWSHighlacework-global-47control:1.19

control:1.20

DomainSeverityPolicy IDTag
AWSMediumlacework-global-48control:1.20

control:1.21

DomainSeverityPolicy IDTag
AWSMediumlacework-global-71control:1.21

control:2.1.1

DomainSeverityPolicy IDTag
AWSMediumlacework-global-72control:2.1.1

control:2.1.2

DomainSeverityPolicy IDTag
AWSMediumlacework-global-73control:2.1.2

control:2.1.3

DomainSeverityPolicy IDTag
AWSMediumlacework-global-49control:2.1.3

control:2.1.4

DomainSeverityPolicy IDTag
AWSMediumlacework-global-74control:2.1.4

control:2.1.5

DomainSeverityPolicy IDTag
AWSMediumlacework-global-50control:2.1.5

control:2.2.1

DomainSeverityPolicy IDTag
AWSMediumlacework-global-51control:2.2.1

control:2.3.1

DomainSeverityPolicy IDTag
AWSMediumlacework-global-52control:2.3.1

control:3.1

DomainSeverityPolicy IDTag
AWSMediumlacework-global-53control:3.1

control:3.2

DomainSeverityPolicy IDTag
AWSLowlacework-global-75control:3.2

control:3.3

DomainSeverityPolicy IDTag
AWSHighlacework-global-54control:3.3

control:3.4

DomainSeverityPolicy IDTag
AWSLowlacework-global-55control:3.4

control:3.5

DomainSeverityPolicy IDTag
AWSHighlacework-global-76control:3.5

control:3.6

DomainSeverityPolicy IDTag
AWSHighlacework-global-56control:3.6

control:3.7

DomainSeverityPolicy IDTag
AWSHighlacework-global-77control:3.7

control:3.8

DomainSeverityPolicy IDTag
AWSHighlacework-global-78control:3.8

control:3.9

DomainSeverityPolicy IDTag
AWSMediumlacework-global-79control:3.9

control:3.10

DomainSeverityPolicy IDTag
AWSMediumlacework-global-80control:3.10

control:3.11

DomainSeverityPolicy IDTag
AWSMediumlacework-global-81control:3.11

control:4.1

DomainSeverityPolicy IDTag
AWSMediumlacework-global-57control:4.1

control:4.2

DomainSeverityPolicy IDTag
AWSMediumlacework-global-58control:4.2

control:4.3

DomainSeverityPolicy IDTag
AWSLowlacework-global-59control:4.3

control:4.4

DomainSeverityPolicy IDTag
AWSMediumlacework-global-60control:4.4

control:4.5

DomainSeverityPolicy IDTag
AWSLowlacework-global-61control:4.5

control:4.6

DomainSeverityPolicy IDTag
AWSMediumlacework-global-82control:4.6

control:4.7

DomainSeverityPolicy IDTag
AWSMediumlacework-global-83control:4.7

control:4.8

DomainSeverityPolicy IDTag
AWSMediumlacework-global-62control:4.8

control:4.9

DomainSeverityPolicy IDTag
AWSMediumlacework-global-84control:4.9

control:4.10

DomainSeverityPolicy IDTag
AWSMediumlacework-global-85control:4.10

control:4.11

DomainSeverityPolicy IDTag
AWSMediumlacework-global-86control:4.11

control:4.12

DomainSeverityPolicy IDTag
AWSMediumlacework-global-63control:4.12

control:4.13

DomainSeverityPolicy IDTag
AWSMediumlacework-global-64control:4.13

control:4.14

DomainSeverityPolicy IDTag
AWSMediumlacework-global-65control:4.14

control:4.15

DomainSeverityPolicy IDTag
AWSLowlacework-global-66control:4.15

control:5.1

DomainSeverityPolicy IDTag
AWSHighlacework-global-67control:5.1

control:5.2

DomainSeverityPolicy IDTag
AWSHighlacework-global-68control:5.2

control:5.3

DomainSeverityPolicy IDTag
AWSHighlacework-global-87control:5.3

control:5.4

DomainSeverityPolicy IDTag
AWSHighlacework-global-88control:5.4