82 lines
2.3 KiB
JSON
82 lines
2.3 KiB
JSON
|
[
|
||
|
|
{
|
||
|
|
"id": "POL-SEC-001",
|
||
|
|
"name": "Production SSH Access Control",
|
||
|
|
"category": "Security",
|
||
|
|
"version": "1.0.0",
|
||
|
|
"owner": "EOS Team",
|
||
|
|
"status": "Active",
|
||
|
|
"acceptanceTests": [
|
||
|
|
"S-001"
|
||
|
|
],
|
||
|
|
"regressionTests": true,
|
||
|
|
"evidence": "Runtime Trace",
|
||
|
|
"lastVerified": "2026-07-01",
|
||
|
|
"rule": "no-ssh-prod",
|
||
|
|
"description": "SSH-åtkomst till produktion är förbjuden. Alla ändringar måste gå via godkänd pipeline."
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "POL-SEC-002",
|
||
|
|
"name": "Hardcoded Secrets Prevention",
|
||
|
|
"category": "Security",
|
||
|
|
"version": "1.0.0",
|
||
|
|
"owner": "EOS Team",
|
||
|
|
"status": "Active",
|
||
|
|
"acceptanceTests": [
|
||
|
|
"S-004"
|
||
|
|
],
|
||
|
|
"regressionTests": true,
|
||
|
|
"evidence": "Runtime Trace",
|
||
|
|
"lastVerified": "2026-07-01",
|
||
|
|
"rule": "no-hardcoded-secrets",
|
||
|
|
"description": "Hemligheter får aldrig lagras i källkod. Använd AWS Secrets Manager eller motsvarande."
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "POL-DEP-001",
|
||
|
|
"name": "Pipeline Required for Production Deployment",
|
||
|
|
"category": "Deployment",
|
||
|
|
"version": "1.0.0",
|
||
|
|
"owner": "EOS Team",
|
||
|
|
"status": "Active",
|
||
|
|
"acceptanceTests": [
|
||
|
|
"S-003"
|
||
|
|
],
|
||
|
|
"regressionTests": true,
|
||
|
|
"evidence": "Runtime Trace",
|
||
|
|
"lastVerified": "2026-07-01",
|
||
|
|
"rule": "pipeline-required",
|
||
|
|
"description": "Deployment till produktion kräver godkänd CI/CD-pipeline."
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "POL-DAT-001",
|
||
|
|
"name": "Production Data Modification Control",
|
||
|
|
"category": "Data",
|
||
|
|
"version": "1.0.0",
|
||
|
|
"owner": "EOS Team",
|
||
|
|
"status": "Active",
|
||
|
|
"acceptanceTests": [
|
||
|
|
"S-002"
|
||
|
|
],
|
||
|
|
"regressionTests": true,
|
||
|
|
"evidence": "Runtime Trace",
|
||
|
|
"lastVerified": "2026-07-01",
|
||
|
|
"rule": "no-direct-production-db-write",
|
||
|
|
"description": "Okontrollerade förändringar av persistent data är förbjudna. Använd godkänd migreringsprocess."
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "POL-INFRA-001",
|
||
|
|
"name": "Production Infrastructure Change Control",
|
||
|
|
"category": "Infrastructure",
|
||
|
|
"version": "1.0.0",
|
||
|
|
"owner": "EOS Team",
|
||
|
|
"status": "Active",
|
||
|
|
"acceptanceTests": [
|
||
|
|
"S-005"
|
||
|
|
],
|
||
|
|
"regressionTests": true,
|
||
|
|
"evidence": "Runtime Trace",
|
||
|
|
"lastVerified": "2026-07-01",
|
||
|
|
"rule": "no-unapproved-infra-change",
|
||
|
|
"description": "Förändring av produktionsinfrastruktur kräver godkänd Infrastructure-as-Code-process."
|
||
|
|
}
|
||
|
|
]
|