What's new?

Control Types

• AWS > CloudFormation > Hook > Prevention
• AWS > CloudFormation > Hook > Prevention > Discovery
• AWS > Control Tower > Enabled Control > Prevention
• AWS > Control Tower > Enabled Control > Prevention > Discovery
• AWS > EC2 > Account Attributes > Prevention
• AWS > EC2 > Account Attributes > Prevention > Discovery
• AWS > IAM > Account Password Policy > Prevention
• AWS > IAM > Account Password Policy > Prevention > Discovery
• AWS > Organizations > Resource Control Policy > Deny Statement Prevention
• AWS > Organizations > Resource Control Policy > Deny Statement Prevention > Discovery
• AWS > Organizations > Service Control Policy > Allow Boundary Prevention
• AWS > Organizations > Service Control Policy > Allow Boundary Prevention > Discovery
• AWS > Organizations > Service Control Policy > Deny Statement Prevention
• AWS > Organizations > Service Control Policy > Deny Statement Prevention > Discovery
• AWS > S3 > Account > Prevention
• AWS > S3 > Account > Prevention > Discovery

Prevention Types

• AWS CloudFormation Hook
• AWS Control Tower Preventive Control
• AWS Control Tower Proactive Control
• AWS EC2 Account Attribute
• AWS IAM Account Password Policy
• AWS RCP Deny Statement
• AWS S3 Account
• AWS SCP Allow Boundary
• AWS SCP Deny Statement

Prevention Benchmarks

• AWS CIS v6.0.0
• AWS NIST 800-53 Rev 5
• AWS P1 Preventions
• AWS PCI DSS v4