- Home
- Cloud Security
- Cloud Security Posture Management
- Terraform Module: AWS Secure Baseline

Terraform Module: AWS Secure Baseline
A Terraform module that establishes security baseline configurations for AWS accounts based on CIS benchmarks and AWS security best practices.

Terraform Module: AWS Secure Baseline
A Terraform module that establishes security baseline configurations for AWS accounts based on CIS benchmarks and AWS security best practices.
Terraform Module: AWS Secure Baseline Description
A Terraform module that configures AWS accounts with security baseline settings based on CIS Amazon Web Services Foundations v1.4.0 and AWS Foundational Security Best Practices v1.0.0. The module implements identity and access management controls including IAM password policies, support incident handling roles, AWS Config rules for root account auditing, IAM Access Analyzer enablement across regions, and S3 account-level public access blocking. For logging and monitoring, it enables CloudTrail across all regions with CloudWatch Logs delivery, object-level logging for S3 buckets, CloudTrail Insights event logging, and KMS encryption for CloudTrail logs. All logs are stored in S3 buckets with access logging enabled and automatic archival to Amazon Glacier after a configurable period (default 90 days). The module sets up CloudWatch alarms for critical AWS account changes and enables AWS Config to monitor and enforce compliance with AWS security best practices. It provides automated infrastructure-as-code deployment of security configurations to establish a secure foundation for AWS environments.
FEATURED
Password manager with end-to-end encryption and identity protection features
VPN service providing encrypted internet connections and privacy protection
Fractional CISO services for B2B companies to accelerate sales and compliance
Stay Updated with Mandos Brief
Get the latest cybersecurity updates in your inbox
TRENDING CATEGORIES
POPULAR
Security platform that provides protection, monitoring and governance for enterprise generative AI applications and LLMs against various threats including prompt injection and data poisoning.
A threat intelligence aggregation service that consolidates and summarizes security updates from multiple sources to provide comprehensive cybersecurity situational awareness.
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.