Skip to main content

Achieve Compliance with the CIS AWS Foundations Benchmark

info

This guide was last updated on 6th September 2021, and it covers CIS 1.4.0 Benchmark recommendations. We aim to keep it up to date with our infrastructure-as-code modules with the latest CIS Benchmark that has been released. If you need to access older versions, please get in touch with us.

Overview​

This is a complete guide to help you achieve compliance with the CIS AWS Foundations Benchmark. By following this guide, you can launch infrastructure that is compliant with the Benchmark recommendations, and you'll be set to retain a compliant state over time because all of the infrastructure is defined as code. This guide targets version 1.4.0 of the Benchmark.

Previously, we supported versions 1.3.0 and 1.2.0 of the Benchmark. If you are looking to upgrade from an older version please follow these in order:

CIS Benchmark ArchitectureCIS Benchmark Architecture

Sections​

Feel free to read this guide from start to finish or skip around to whatever sections interest you.

1

Core Concepts

An overview of the AWS Foundations Benchmark, including its control sections and structure.
2

Production-grade Design

How to use infrastructure as code to achieve compliance with minimal redundancy and maximum flexibility.
3

Deployment Walkthrough

A step-by-step guide to achieving compliance using the Gruntwork Infrastructure as Code Library and the Gruntwork CIS AWS Foundations Benchmark wrapper modules.
4

Next Steps

How to measure and maintain compliance.
5

Traceability Matrix

A reference table that maps each Benchmark recommendation to the corresponding section in the deployment walkthrough.