v1.1.0: CIS AWS Foundations Benchmark v3.0 Compliance Engine

[gebalamariusz]

cloud-audit v1.1.0 ships with a built-in CIS AWS Foundations Benchmark v3.0.0 compliance engine.

What's new

• 80 checks (was 47) - 33 new checks for full CIS v3.0 automated coverage
• CIS compliance engine - 62 controls mapped, 55 fully automated, per-control evidence templates
• --compliance cis_aws_v3 CLI flag with readiness scoring
• Compliance HTML report - auditor-ready, per-control PASS/FAIL with evidence and Terraform + CLI remediation
• 20 attack chain rules (was 16) - 4 new CIS-specific chains mapped to CIS controls
• Documentation site - 25 pages at haitmg.pl/cloud-audit

Quick start

pip install cloud-audit
cloud-audit scan --compliance cis_aws_v3
cloud-audit scan --compliance cis_aws_v3 --format html -o report.html

New CLI commands

cloud-audit list-frameworks          # Show available frameworks
cloud-audit show-framework cis_aws_v3  # View control mappings

What makes this different

Prowler has --compliance with 576 checks but provides remediation guidance only for CIS checks. cloud-audit provides per-control Terraform + CLI remediation for every compliance control - the only open-source scanner that does this.

Coming next

SOC 2, BSI C5, ISO 27001, HIPAA, NIS2 compliance frameworks.

Full write-up: CIS AWS v3.0 in 60 Seconds: Automate Compliance with Terraform

Full changelog: CHANGELOG.md