What problem does it solve? Manually auditing an AWS account against security frameworks like CIS, PCI-DSS, HIPAA, and SOC 2 is slow and error-prone. This Skill automates the checks so you can identify misconfigurations, prepare for audits, and maintain continuous compliance monitoring. ## Core Features & Use Cases - CIS AWS Foundations Checks: Bash scripts covering IAM (root usage, MFA, password policy, key rotation), logging (CloudTrail, AWS Config, VPC Flow Logs), monitoring (CloudWatch metric filters), and networking (open SSH/RDP security groups). - PCI-DSS and HIPAA Checks: Python and Bash scripts that verify encryption at rest, MFA enforcement, network exposure, and audit logging mapped to specific regulatory controls. - Automated Reporting: A Python report generator that scores compliance as a percentage and saves results to dated JSON files. - Use Case: Before a quarterly audit, run the CIS benchmark checks to find IAM users without MFA, unencrypted EBS volumes, and security groups open to 0.0.0.0/0, then export the findings as a JSON report. ## Quick Start Ask the AI to run a CIS AWS Foundations compliance check on your AWS account and summarize any failing controls.
