prowler

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls and many more additional checks that help on GDPR, HIPAA and other security frameworks.

Minimalist containerized implementation of Prowler from https://github.com/toniblyx/prowler, made to run within ECS Fargate and have Secrets passed via AWS Secrets Manager

Example playbook for executing Prowler with Ansible and sending results to Splunk HEC.

Secure Benchmark Examples

RiskScanner 项目的针对 AWS 的安全最佳实践评估、审计的工具。

Embedded edition of Prowler into AWS Batch

Setting up Prowler to run in a set of containers on ECS and save to S3