@cloudgraph/policy-pack-aws-cis-1.3.0 v0.5.0

CIS Amazon Web Services Foundations 1.3.0

Policy Pack based on the AWS Foundations 1.3.0 benchmark provided by the Center for Internet Security (CIS)

First Steps

1. Install Cloud Graph CLI.
2. Set up the AWS Provider for CG with the cg init aws command.
3. Add Policy Pack for CIS Amazon Web Services Foundations benchmark using cg policy add aws-cis-1.3.0 command.
4. Execute the ruleset using the scan command cg scan aws.

5. Query the findings using the different options:

   5a. Querying findings by provider:

   query {
     queryawsFindings {
       CISFindings {
         id
         resourceId
         result
       }
     }
   }

   5b. Querying findings by specific benchmark:

   query {
     queryawsCISFindings {
       id
       resourceId
       result
     }
   }

   5c. Querying findings by resource:

   query {
     queryawsIamUser {
       id
       arn
       accountId
       CISFindings {
         id
         resourceId
         result
       }
     }
   }

Available Ruleset