From 580c325afc619ffee4da3dd6a9dc1dfba4ce1af3 Mon Sep 17 00:00:00 2001 From: AugustasV Date: Wed, 5 Jun 2024 09:00:05 +0000 Subject: [PATCH] =?UTF-8?q?=F0=9F=97=A3=EF=B8=8FHow=20to=20maintain=20and?= =?UTF-8?q?=20automate=20compliance=20with=20AWS?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- 20230324163629/README.md | 32 ++++++++++++++++++++++++++++++++ dex/changes.md | 5 +++-- dex/nodes.tsv | 1 + keg | 2 +- 4 files changed, 37 insertions(+), 3 deletions(-) create mode 100644 20230324163629/README.md diff --git a/20230324163629/README.md b/20230324163629/README.md new file mode 100644 index 0000000..7a1c4ab --- /dev/null +++ b/20230324163629/README.md @@ -0,0 +1,32 @@ +# 🗣️How to maintain and automate compliance with AWS + +## Compliance Challenges and Solutions + +- Continuously assessing and maintaining compliance across cloud environments is a major challenge[1] +- AWS provides tools like AWS Config, AWS CloudTrail, and AWS Audit Manager to help manage compliance[1] + +## AWS Config for Compliance + +- AWS Config continuously tracks resource configurations and changes[1] +- It allows creating rules to evaluate compliance of resource configurations against desired settings[1] +- Automated remediation of non-compliant resources is possible using AWS Config rules and AWS Systems Manager[5] + +## AWS CloudTrail for Auditing + +- CloudTrail provides a log of all API activity across AWS accounts and services[1] +- Logs can be analyzed to audit actions taken and identify potential security risks or compliance violations[1] + +## AWS Audit Manager + +- Audit Manager helps automate evidence collection for audits of AWS usage[1] +- It continuously collects and evaluates audit evidence from AWS services like Config and CloudTrail[1] +- Audit Manager provides a centralized dashboard to review audit preparedness and findings[1] + +## Compliance Best Practices + +- Leverage managed rules and security standards from AWS Security Hub[5] +- Implement preventative guardrails using AWS Config rules and service control policies[1][5] +- Automate remediation of non-compliant resources with Systems Manager Automation documents[5] + +Source: [How to maintain and automate compliance with AWS](https://aws.amazon.com/events/summits/emea/stockholm/agenda/?emea-event-agenda-card.sort-by=item.additionalFields.title&emea-event-agenda-card.sort-order=asc&awsf.emea-event-agenda-level=*all&awsf.emea-event-agenda-role=*all&awsf.emea-event-agenda-category=*all&awsf.emea-event-agenda-aws-industry=*all&emea-event-agenda-card.q=COP303&emea-event-agenda-card.q_operator=AND#session) + diff --git a/dex/changes.md b/dex/changes.md index e0a5406..c5cb849 100644 --- a/dex/changes.md +++ b/dex/changes.md @@ -1,3 +1,4 @@ +* 2024-06-05 09:00:05Z [🗣️How to maintain and automate compliance with AWS](../20230324163629) * 2024-03-28 18:36:49Z [AWS Bedrock](../20230324163628) * 2024-03-17 11:03:42Z [🗣️Diagrams and Schemes](../20230221085024) * 2024-03-17 10:59:48Z [🗣️ Eight System Traps: how systems (and organizations) faili](../20230324163627) @@ -73,7 +74,6 @@ * 2023-05-15 09:03:03Z [Metrics](../20221024104) * 2023-05-14 21:29:08Z [Terraform labs insights](../20230324163527) * 2023-04-12 21:28:51Z [Falco security tool](../20230324163526) -* 2023-03-27 22:52:49Z [Wide-Column Database](../20220117094258) * 2023-03-27 22:52:49Z [How to install hard to fit/stubborn tire on rim](../20220503101007) * 2023-03-27 22:52:49Z [Key things about ](../20220217091859) * 2023-03-27 22:52:49Z [About SRE](../20221025064541) @@ -91,9 +91,10 @@ * 2023-03-27 22:52:49Z [Discipline, Pomodoro timer](../202111032008) * 2023-03-27 22:52:49Z [Why follow others to do labs](../20230219061257) * 2023-03-27 22:52:49Z [Pulumi ](../20220919084940) -* 2023-03-27 22:52:49Z [About Dopamine](../20220128092246) +* 2023-03-27 22:52:49Z [Wide-Column Database](../20220117094258) * 2023-03-27 22:52:49Z [Raspberry Pi OS - DietPi](../20220513101212) * 2023-03-27 22:52:49Z [Zettelkasten](../20220923075718) * 2023-03-27 22:52:49Z [Distroless container images](../20220821062737) * 2023-03-27 22:52:49Z [Creating KEG system for notes taking](../20230324163524) * 2023-03-27 22:52:49Z [Refactoring legacy code](../20220530123459) +* 2023-03-27 22:52:49Z [About Dopamine](../20220128092246) diff --git a/dex/nodes.tsv b/dex/nodes.tsv index ac55e9c..8b6723e 100644 --- a/dex/nodes.tsv +++ b/dex/nodes.tsv @@ -97,3 +97,4 @@ 20230324163626 2024-03-12 11:52:08Z Kubernetes resources quotas 20230324163627 2024-03-17 10:59:48Z 🗣️ Eight System Traps: how systems (and organizations) faili 20230324163628 2024-03-28 18:36:49Z AWS Bedrock +20230324163629 2024-06-05 09:00:05Z 🗣️How to maintain and automate compliance with AWS diff --git a/keg b/keg index 7103be2..020e257 100644 --- a/keg +++ b/keg @@ -1,4 +1,4 @@ -updated: 2024-03-28 18:36:49Z +updated: 2024-06-05 09:00:05Z kegv: 2023-01 title: A Sample Keg