NIST 800-53 Rev. 4 for AWS

4min

Policy Pack based on the 800-53 Rev. 4 benchmark provided by the The National Institute of Standards and Technology (NIST)﻿
First Steps
Install Cloud Graph CLI.
Set up the AWS Provider for CG with the cg init aws command.
Add Policy Pack NIST 800-53 Rev. 4 for AWS benchmark using cg policy add aws-nist-800-53-rev4 command.
Execute the ruleset using the scan command cg scan aws.
Query the findings using the different options:
Query findings by provider:
GraphQL
|
query {
  queryawsFindings {
    NISTFindings {
      id
      resourceId
      result
    }
  }
}
query {
  queryawsFindings {
    NISTFindings {
      id
      resourceId
      result
    }
  }
}
﻿
Query findings by specific benchmark:
GraphQL
|
query {
  queryawsNISTFindings {
    id
    resourceId
    result
  }
}
query {
  queryawsNISTFindings {
    id
    resourceId
    result
  }
}
﻿
Query findings by resource:
GraphQL
|
query {
  queryawsIamUser {
    id
    arn
    accountId
    NISTFindings {
      id
      resourceId
      result
    }
  }
}
query {
  queryawsIamUser {
    id
    arn
    accountId
    NISTFindings {
      id
      resourceId
      result
    }
  }
}
﻿
Available Ruleset
Please see the NIST 800-53 Rev. 4 README for a table of available rules.

Updated 03 Mar 2023

Did this page help you?

PCI Data Security Standard V 3.2.1 for AWS

TABLE OF CONTENTS