Following DATASYNC Controls are implemented: 1. aws-datasync-m-1: Ensure S3 location specifies predefined role 2. aws-datasync-m-2: Ensure that DataSync should have VPC endpoint to prevent network traffic leaving from the AWS network.