NIST 800-53 Rev. 4 for AWS

Policy Pack based on the 800-53 Rev. 4 benchmark provided by the The National Institute of Standards and Technology (NIST)

First Steps

1. Install Cloud Graph CLI.
2. Set up the AWS Provider for CG with the cg init aws command.
3. Add Policy Pack NIST 800-53 Rev. 4 for AWS benchmark using cg policy add aws-nist-800-53-rev4 command.
4. Execute the ruleset using the scan command cg scan aws.
5. Query the findings using the different options:

Query findings by provider:

query {
  queryawsFindings {
    NISTFindings {
      id
      resourceId
      result
    }
  }
}

Query findings by specific benchmark:

query {
  queryawsNISTFindings {
    id
    resourceId
    result
  }
}

Query findings by resource:

query {
  queryawsIamUser {
    id
    arn
    accountId
    NISTFindings {
      id
      resourceId
      result
    }
  }
}

Available Ruleset

Please see the NIST 800-53 Rev. 4 README for a table of available rules.