{
  "component-definition": {
    "components": [
      {
        "control-implementations": [
          {
            "description": "SOC 2 controls satisfied by this archetype.",
            "implemented-requirements": [
              {
                "control-id": "cc6.1",
                "description": "The entity implements logical access security software, infrastructure, and architectures over protected information assets. Satisfied by: aws_cloudtrail.org, aws_iam_account_password_policy.strict, aws_kms_key.audit, aws_s3_bucket.audit, aws_s3_bucket_policy.audit, aws_s3_bucket_server_side_encryption_configuration.audit.",
                "uuid": "5149aa72-515f-511f-b0e0-b4160095d3ed"
              },
              {
                "control-id": "cc6.6",
                "description": "The entity implements logical access security measures to protect against threats from sources outside its system boundaries. Satisfied by: aws_s3_bucket_public_access_block.audit, aws_vpc.main.",
                "uuid": "a3b60d1b-d240-5202-af58-63bb663732fe"
              },
              {
                "control-id": "cc7.2",
                "description": "The entity monitors system components and the operation of those components for anomalies indicative of malicious acts, natural disasters, and errors. Satisfied by: aws_cloudtrail.org, aws_flow_log.main, aws_s3_bucket_policy.audit, aws_s3_bucket_versioning.audit.",
                "uuid": "10ebbf57-c86f-5f32-ad8d-8d535dd6a015"
              }
            ],
            "source": "https://sysbuild.dev/catalogs/soc2",
            "uuid": "3b522a25-af7e-5cbc-aa79-76b2284623b8"
          }
        ],
        "description": "SOC 2 baseline AWS landing zone: encrypted audit logging, org CloudTrail, hardened IAM password policy, and a VPC with flow logs.",
        "title": "soc2-aws-baseline",
        "type": "service",
        "uuid": "fef3fe1c-ef06-53c9-b57b-91b45a13ae54"
      }
    ],
    "metadata": {
      "last-modified": "2026-06-29T00:00:00Z",
      "oscal-version": "1.1.2",
      "title": "SysBuild Blueprints \u2014 soc2-aws-baseline",
      "version": "0.1.0"
    },
    "uuid": "cb336312-708d-54f0-9bb2-c56e28e2b425"
  }
}