steampipe-mod-aws-compliance
steampipe-plugin-aws
Our great sponsors
steampipe-mod-aws-compliance | steampipe-plugin-aws | |
---|---|---|
18 | 8 | |
351 | 171 | |
3.7% | 2.9% | |
8.4 | 9.2 | |
7 days ago | 7 days ago | |
HCL | Go | |
Apache License 2.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
steampipe-mod-aws-compliance
-
How to run an AWS CIS v3.0 assessment in CloudShell
In a prior post I showed how to install Steampipe in AWS CloudShell to instantly query over 460+ resource types from your AWS APIs using SQL, and another post on how to use the Steampipe AWS Compliance mod to assess over 25+ security benchmarks across your AWS accounts.
-
What's new in the CIS v2.0 benchmark for AWS
The Steampipe AWS Compliance mod, is packed with hundreds of controls that check your AWS accounts for compliance with 25 benchmarks including NIST, PCI, HIPAA, SOC2, FedRAMP and more, now includes new controls for AWS CIS v2.0. If you're new to Steampipe, download Steampipe, install and configure the AWS plugin, and run these commands.
-
Open source automated AWS CIS v2.0 benchmark assessment just released by Steampipe.io
The Steampipe AWS Compliance mod, is packed with hundreds of open source controls that evaluate your AWS accounts for compliance with 25 benchmarks (NIST, PCI, HIPAA, etc). The mod now also includes new controls for AWS CIS v2.0.
- Is there an open source version of Dome9?
-
Steampipe vs aws security hub
The Steampipe AWS Compliance mod has more coverage with 21 security benchmarks (e.g. CIS v1.5, PCI, Foundations, NIST 800-53 rev5, etc).
- CLoud Custodian - Pretty Output? Alternatives?
- Scanning for AWS Security Issues with Trivy
-
Open source AWS Dashboards: Visualize your AWS assets & security reports; 100+ dashboards out of the box; Build your own with HCL & SQL.
AWS Compliance mod: includes instant compliance reports for CIS, PCI, NIST, HIPAA, SOC2 & more: https://hub.steampipe.io/mods/turbot/aws_compliance
-
How to perform a security audit of your AWS account in AWS CloudShell
For example, the AWS Compliance Mod layers benchmarks and controls covering 13 compliance standards including CIS, HIPAA, NIST, PCI, FedRAMP, SOC 2 and more. Each benchmark includes a set of pass/fail controls. Each control tests for a compliance recommendation such as "EC2 instances" should be managed by AWS Systems Manager" and reports OK or Alarm.
-
Compliance as code for AWS
Steampipe (https://steampipe.io) is an open source CLI to query AWS and more with SQL. The AWS Compliance mod (https://hub.steampipe.io/mods/turbot/aws_compliance) has over 500 controls out of the box covering CIS, PCI, NIST, HIPAA, SOC2 & more you can run in your terminal across all your AWS accounts.
steampipe-plugin-aws
-
Osquery: An sqlite3 virtual table exposing operating system data to SQL
be mindful of its AGPLv3 https://github.com/turbot/steampipe/blob/v0.21.8/LICENSE (AFAIK v0.4.3 is the last MIT release https://github.com/turbot/steampipe/blob/v0.4.3/LICENSE ) and the actual providers are Apache 2 <https://github.com/turbot/steampipe-plugin-aws/blob/v0.131.0...> (but I don't know if provider drift makes them compatible with 0.4 or not)
iasql seems to be AWS only, but good for them for taking this on:
-
Need to audit an Azure environment, any tip?
It's a very similar approach querying any of the plugins (AWS, Azure, etc) as it's a common interface to query those APIs with SQL. The AWS plugin is one of the more widely used in the community, along with it's associated mods to visualize resources and compliance to security & ops benchmarks.
-
Easily Query your Cloud Inventory with Steampipe
~$ steampipe plugin install aws aws [====================================================================] Done Installed plugin: aws@latest v0.78.0 Documentation: https://hub.steampipe.io/plugins/turbot/aws
-
Where are those CloudTrail IP addresses coming from?
Setting up CloudTrail is essential to understanding your users' AWS API activity: what happened, by whom and from where. One field in the event logs is source IP address. But that doesn't tell you where in the world those AWS API actions are coming from. In this post we'll show how to use Steampipe with the AWS and ipstack plugins to enrich your CloudTrail events with location information.
-
How to perform a security audit of your AWS account in AWS CloudShell
In my last post I showed how to install Steampipe and use it to instantly query your AWS APIs using SQL right in AWS CloudShell. For example here's a query that uses the Steampipe AWS plugin to query which AWS IAM users have MFA enabled:
-
Instantly query your AWS APIs in CloudShell
It takes just a few seconds to install Steampipe itself, along with the AWS plugin that maps AWS API calls to Postgres tables.
- Querying AWS at scale across APIs, regions, and accounts
-
Categorizing Lambda functions based on their risk profile
Hint: We actually have some aws_cost_* tables in active development in this branch. Not ready for release yet, but we're excited about how they are coming together!
What are some alternatives?
cloudquery - The open source high performance ELT framework powered by Apache Arrow
steampipe - Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
prowler - Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
steampipe-plugin-hackernews - Use SQL to instantly query stories, users and other items from Hacker News. Open source CLI. No DB required.
terraform-aws-secure-baseline - Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.
steampipe-plugin-okta - Use SQL to instantly query users, groups, applications and more from Okta. Open source CLI. No DB required.
steampipe-mod-aws-thrifty - Are you a Thrifty AWS dev? This mod checks your AWS accounts for unused and under-utilized resources using Powerpipe and Steampipe.
steampipe-plugin-virustotal - Use SQL to instantly query file, domain, URL and IP scanning results from VirusTotal.
pci_fetch - A library for querying connected PCI devices and a pci.ids parser.
HomeBrew - 🍺 The missing package manager for macOS (or Linux)
steampipe-samples - Examples, samples, snippets and scripts to use with Steampipe.
steampipe-plugin-github - Use SQL to instantly query repositories, users, gists and more from GitHub. Open source CLI. No DB required.