Policy: AWS > Well-Architected Tool > AWS Well-Architected Framework > Security > SEC 06. How do you protect your compute resources? > Reduce attack surface

Reduce your attack surface by hardening operating systems, minimizing components, libraries, and externally consumable services in use.

See Reduce attack surface for more information.

Resource Types

This policy targets the following resource types:

This policy is used with the following primary policy:

Category URI

tmod:@turbot/turbot#/control/categories/other

Policy Type URI

tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec06ReduceSurface

GraphQL

query policyType(id: "tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec06ReduceSurface") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec06ReduceSurface'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec06ReduceSurface'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec06ReduceSurface"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec06ReduceSurface"