Terraform Module: AWS Secure Baseline
A Terraform module that configures AWS accounts with security baseline settings based on CIS Amazon Web Services Foundations v1.4.0 and AWS Foundational Security Best Practices v1.0.0. The module implements identity and access management controls including IAM password policies, support incident handling roles, AWS Config rules for root account auditing, IAM Access Analyzer enablement across regions, and S3 account-level public access blocking. For logging and monitoring, it enables CloudTrail across all regions with CloudWatch Logs delivery, object-level logging for S3 buckets, CloudTrail Insights event logging, and KMS encryption for CloudTrail logs. All logs are stored in S3 buckets with access logging enabled and automatic archival to Amazon Glacier after a configurable period (default 90 days). The module sets up CloudWatch alarms for critical AWS account changes and enables AWS Config to monitor and enforce compliance with AWS security best practices. It provides automated infrastructure-as-code deployment of security configurations to establish a secure foundation for AWS environments.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A tutorial demonstrating how to implement Kubernetes Engine security features to control application privileges through host access controls and network access policies.
Collection of Kubernetes manifests creating pods with elevated privileges for security testing.
FestIn discovers open S3 buckets associated with a domain using crawling and DNS reconnaissance techniques.
A search engine for open Amazon S3 buckets and their contents, allowing users to search for files using keywords, filename extensions, and full path.
CloudSploit by Aqua is an open-source multi-cloud security scanning tool that detects security risks and compliance issues across AWS, Azure, GCP, OCI, and GitHub platforms.
AWS Vault securely stores AWS IAM credentials in the operating system's keystore and generates temporary credentials for development environments.
A deprecated Kubernetes workload policy enforcement tool that helped secure multi-tenant clusters through various security policies and configurations.
A community-driven repository of pre-built security analytics queries and rules for monitoring and detecting threats in Google Cloud environments across various log sources and activity types.
A setuid implementation of user namespaces that enables running unprivileged containers without root privileges as a secure alternative to traditional container runtimes.
PINNED
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Proton Pass is a cross-platform password manager that provides encrypted storage, password generation, and security monitoring features with integrated 2FA and dark web monitoring capabilities.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.