turbot / steampipe-mod-aws-compliance

Run individual controls or full compliance benchmarks for CIS, PCI, NIST, HIPAA and more across all of your AWS accounts using Powerpipe and Steampipe.
https://hub.steampipe.io/mods/turbot/aws_compliance
Apache License 2.0
372 stars 63 forks source link

Support CISv8 #559

Closed cristiandley closed 1 year ago

cristiandley commented 1 year ago

Add support to CISv8

Reference: https://docs.aws.amazon.com/config/latest/developerguide/operational-best-practices-for-cis-critical-security-controls-v8.html

Describe alternatives you've considered Already use a SOC2 to CISv8 mapping :(

cbruno10 commented 1 year ago

@cristiandley Are you interested in IG1, IG2, and/or IG3? Also, I'm not familiar with the differences, do you know any key differences between the versions? Thanks!

rajlearner17 commented 1 year ago

@cristiandley @cbruno10 Audit Manager supports CIS Controls v8 IG1, as we mostly follow the Audit Manager's implementation; I guess this will be good to start with. image

misraved commented 1 year ago

Closed as a part of https://github.com/turbot/steampipe-mod-aws-compliance/pull/568