tf-security-baselines

What problem does it solve?

AWS Terraform configurations often drift from security baselines, leaving misconfigurations that expose data and increase risk. This Skill provides a structured framework to assess, map, and remediate against CIS and NIST AWS baselines within Terraform deployments.

Core Features & Use Cases

• Baseline alignment checks: Validate Terraform modules against CIS AWS Foundations and NIST controls for IAM, data protection, networking, logging, and resilience.
• Evidence-based findings: Generate findings with risk ratings, justifications, and authoritative citations.
• Remediation guidance: Provide concrete steps to remediate identified gaps in AWS configurations.
• Use Case: Security teams audit Terraform plans prior to deployment to ensure baseline compliance.

Quick Start

Run an AWS security baseline assessment on a Terraform configuration, identifying CIS/NIST gaps and producing evidence-based findings.