repository·main·Indexed 19 days ago
https://github.com/turbot/steampipe-mod-aws-complianceA collection of over 540 security checks for AWS environments, covering industry benchmarks such as CIS, PCI DSS, HIPAA, NIST, and the ACSC Essential Eight. The mod integrates with Powerpipe and Steampipe to provide compliance auditing via web-based dashboards or the command line, including detailed remediation steps for non-compliant AWS resource configurations.
This module provides prescriptive guidance for configuring security options for AWS services within the Compute category. These benchmarks focus on technical configuration settings to maintain or increase security.
Note that these benchmarks are intended to be used in conjunction with the CIS Amazon Web Services Foundations Benchmark. For the most up-to-date official guidance, visit the CIS official website.
AWS Control Tower provides a managed way to set up and govern multi-account AWS environments using best practices. It orchestrates AWS Organizations, AWS Service Catalog, and AWS Single Sign-On to build a landing zone.
In the context of compliance and auditing, Control Tower applies preventive and detective controls (guardrails) to prevent or detect 'drift' (divergence from best practices). These guardrails can ensure that critical resources, such as security logs and cross-account access permissions, are correctly configured and remain unaltered.
The ACSC Essential Eight is a prioritized set of baseline security strategies designed to mitigate cybersecurity incidents, based on the Australian Signals Directorate (ASD) experience. This module provides checks to assess compliance against these strategies.
The framework is divided into two primary components:
These checks are designed to complement other frameworks like the NIST Cybersecurity Framework and ISO 27001.
steampipe-mod-aws-compliance benchmark provides a comprehensive suite of checks designed to detect AWS resource configurations that deviate from security and operational best practices. It is used to identify non-compliant resources across various AWS services.NIST SP 800-171 is a security standard designed to protect the confidentiality of Controlled Unclassified Information (CUI) within nonfederal systems and organizations. It outlines specific security requirements and practices that non-federal organizations must implement when handling CUI on their networks.
For the most current and official version of the NIST SP 800-171 Rev 2 guide, refer to the official NIST website.
The CIS AWS Foundations Benchmark provides prescriptive guidance for foundational, testable, and architecture-agnostic security settings across several AWS services, including:
The CIS AWS Foundations Benchmark provides prescriptive guidance for configuring security options across several core AWS services. The services in scope include:
The FFIEC Cybersecurity Assessment Tool is a measurable and repeatable process designed to help financial institutions identify cyber risks and determine cybersecurity maturity. The assessment is divided into two primary parts:
Inherent Risk Profile: Identifies an institution's inherent risk based on five categories:
Cybersecurity Maturity: Determines the current state of preparedness across five domains: