Stratos Compliance

Compliance Center

Framework posture · Control checks · Audit evidence

CIS AWS Foundations Benchmark v2.0 — 200 controls

8 passing · 6 failing · 0 manual

1.1

Ensure root account has MFA enabled

critical

1.2

Ensure MFA is enabled for all IAM users with console access

high

1.3

Ensure credentials unused for 90 days are disabled

medium

1.4

Ensure access keys are rotated every 90 days

medium

2.1

Ensure CloudTrail is enabled in all regions

high

2.2

Ensure CloudTrail log file validation is enabled

medium

2.3

Ensure S3 bucket for CloudTrail is not publicly accessible

critical

3.1

Ensure no security groups allow unrestricted port 22

high

3.2

Ensure no security groups allow unrestricted port 3389

high

4.1

Ensure VPC flow logging is enabled in all VPCs

medium

4.2

Ensure default security group restricts all traffic

medium

5.1

Ensure S3 bucket default encryption is enabled

high

5.2

Ensure S3 block public access is enabled

critical

5.3

Ensure EBS volumes are encrypted at rest

medium

Posture Summary

Passing184

Failing16

Failing by Severity

critical2

high3

medium1