added inspec inputs

mitre · Apr 16, 2024 · 438e50f · 438e50f
1 parent b129c95
commit 438e50f
Showing 1 changed file with 15 additions and 1 deletion.
diff --git a/spec/mongo-inspec-profile/inspec.yml b/spec/mongo-inspec-profile/inspec.yml
@@ -131,4 +131,18 @@ inputs:
     description: "The path to the mongo data file directory"
     type: string
     value: "/data/db/"
-    required: true
+    required: true
+
+  # SV-252147, SV-252165
+  - name: encryption_at_rest
+    description: "If any data is PII, classified or is deemed by the organization the need to be encrypted at rest"
+    type: boolean
+    value: false
+    required: true
+
+  # SV-252157
+  - name: enable_ldap
+    description: "LDAP is used for authentication and authorization"
+    type: boolean
+    value: false
+    required: true