Ensure AWS Config is enabled in all regions.Ensure CloudTrail trails are integrated with CloudWatch Logs.Ensure the S3 bucket CloudTrail logs to is not publicly accessible.Ensure CloudTrail log file validation is enabled.Ensure CloudTrail is enabled in all regions.
#Aws cis benchmark tool full#
#Aws cis benchmark tool password#
Do not setup access keys during initial user setup for all IAM users that have a console password.Ensure a support role has been created to manage incidents with AWS Support.Ensure IAM instance roles are used for AWS resource access from instances.Ensure security contact information is registered.Ensure IAM Master and IAM Manager roles are active.Ensure IAM policies are attached only to groups or roles.Ensure security questions are registered in the AWS account.Ensure hardware MFA is enabled for the root account.Ensure MFA is enabled for the root account.Ensure no root account access key exists.Ensure IAM password policy expires passwords within 90 days or less.Ensure IAM password policy prevents password reuse.Ensure IAM password policy requires minimum length of 14 or greater.Ensure IAM password policy requires at least one number.Ensure IAM password policy requires at least one symbol.Ensure IAM password policy requires at least one lowercase letter.Ensure IAM password policy requires at least one uppercase letter.Ensure access keys are rotated every 90 days or less.Ensure credentials unused for 90 days or greater are disabled.Ensure multi-factor authentication (MFA) is enabled for all IAM users that have a console password.In all the current version has 52 checks concerning the previously mentioned regions. It depends on AWS-CLI commands and covers hardening and security best practices for all regions related to identity and access management, logging, monitoring and networking. Prowler is an open source tool that automates auditing and hardening guidance of an AWS account based on CIS Amazon Web Services Foundations Benchmark 1.1. This post is about a tool that helps you automate most of the benchmarks – Prowler. For Amazon Web Services (AWS) the current version can be found here: CIS Amazon Web Services Foundations Benchmark 1.1. All of us know that Center for Internet Security offers CIS Security Benchmarks for multiple systems to safeguard them against an ever changing threat landscape.
0 kommentar(er)
