prowler-compliance

You can audit cloud infrastructure by loading predefined compliance frameworks like CIS, NIST, ISO 27001, and MITRE ATT&CK. This allows you to map specific security checks to compliance requirements and generate structured reports for your cloud environment.

Supported compliance frameworks include CIS, NIST, ISO 27001, and MITRE ATT&CK. You can apply these regimes across multiple cloud providers including AWS, Azure, GCP, and Kubernetes through structured JSON definitions and detailed attribute mapping.

Mapping Prowler security checks to compliance requirements involves loading the relevant framework and applying detailed attribute mapping. This connects individual cloud security checks to specific control requirements, enabling accurate compliance auditing and reporting.

Yes, you can define and manage custom compliance frameworks for multiple cloud providers. The system supports creating structured JSON definitions for various compliance regimes, enabling flexible framework creation tailored to your specific security and regulatory needs.

Yes, prowler-compliance supports Kubernetes environments alongside AWS, Azure, and GCP. You can define, map, and audit compliance frameworks against industry standards specifically within your Kubernetes infrastructure.

The best way to manage multiple cloud compliance frameworks is using a unified system that supports framework creation and control mapping. This enables you to apply standards like CIS and ISO 27001 consistently across AWS, Azure, and GCP through structured definitions.