Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix missing standards frameworks, add AWS AI Services #277

Merged
merged 12 commits into from
Jun 22, 2024
Merged

Conversation

jonrau1
Copy link
Owner

@jonrau1 jonrau1 commented Jun 22, 2024

TL;DR = Fixed missing CIS Benchmarks and control information for the HTML Compliance report. Added AWS AI Service auditors for Bedrock and Q Business.

Closes #276

Overview of changes

  • Improved logic in AWS Auditor for Amazon EKS, now only the most recent (1.30 as of 21 JUNE 2024) K8s version is accepted for "use the latest K8s release"
  • Added AWS Auditor for Amazon Bedrock to check for usage of foundation and custom models, may expand in the future...
  • Added AWS Auditor for Amazon Q Business to check for the usage of Q Biz Apps and if the Apps use KMS CMKs
  • Updated IAM Role for QBiz and Bedrock
  • Added missing Azure CIS Benchmark v2.0.0 control information
  • Fixed all Outputs that report on Compliance controls by adding missing AWS and Azure Benchmarks
  • Re-added FAQ to main readme
  • Removed CodeQL sensitive information logging for Salesforce and M365
  • Small future fixes for Google Workspace (G-Suite) and Snowflake in CloudUtils and EEAuditor

@jonrau1 jonrau1 added bug Something isn't working documentation Improvements or additions to documentation enhancement New feature or request dependencies Pull requests that update a dependency file docker Pull requests that update Docker code python Pull requests that update Python code labels Jun 22, 2024
@jonrau1 jonrau1 self-assigned this Jun 22, 2024
@jonrau1 jonrau1 merged commit 72dbd4e into master Jun 22, 2024
5 checks passed
@jonrau1 jonrau1 deleted the bedrocked branch June 22, 2024 19:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working dependencies Pull requests that update a dependency file docker Pull requests that update Docker code documentation Improvements or additions to documentation enhancement New feature or request python Pull requests that update Python code
Projects
Development

Successfully merging this pull request may close these issues.

[PFR] AWS AI Services
1 participant