How to run -- about aws-security-benchmark HOT 5 CLOSED

Any update on this?

from aws-security-benchmark.

Regarding #4 and $5. If you implement the "aws-security-benchmark/aws_cis_foundation_framework/aws-cis-foundation-benchmark-checklist.py" as a config rule it will run on a regular schedule and send email with the findings. Meaning all resources that were not configured correctly.
The CFn template have a number of config rules and cloudwatch events in it that will alert when configured incorrectly but won't give full report as the benchmark will.
Non of the scripts have remediation built in at this point, I am looking at that for future version for the benchmark.

Assigning to Rob regarding #1-3 and the CFn template what it enables.

from aws-security-benchmark.

Thanks Henrik. Looking forward to hearing from Rob!

from aws-security-benchmark.

Unlike the Quick Starts that you mentioned, launching this CIS CloudFormation template won't create networking resources like VPCs or subnets. It creates the logging, monitoring, and alarming controls as identified in the CIS benchmarks; you can refer to the security control matrix for a mapping of the controls to the benchmarks.

I hope this helps.

from aws-security-benchmark.

Closing this issue. Please let us know if you need anything further.

from aws-security-benchmark.