How To

Free automated AWS CIS v3.0 assessments

Instantly check compliance to the latest AWS CIS benchmark in an always-free Turbot Pipes Developer account. Setup in minutes with interactive dashboards you can share with your team.

Turbot Team
5 min. read - Feb 08, 2024
Instantly check compliance to the latest AWS CIS benchmark in an always-free Turbot Pipes Developer account. Setup in minutes with interactive dashboards you can share with your team.

Turbot Pipes is a cloud intelligence and security platform to gain insights from 80+ cloud services and visualize 700+ ready-to-use interactive dashboards to understand your cloud inventory, navigate resource relationships, evaluate cost optimization recommendations and ensure security posture best practices. With a Pipes always-free Developer account, you can instantly evaluate your cloud environments without the overhead of an expensive CSPM or CNAPP service.

AWS CIS benchmarks are among the more widely used security benchmarks cloud teams use as guidance to configure their AWS accounts. In the latest iteration, AWS CIS v3.0, includes over 60 recomendations. Turbot Pipes leverages the Steampipe AWS Compliance mod which includes the latest CIS benchmark along with 25 other security and compliance control frameworks (e.g. NIST, SOC2, PCI, HIPAA, etc) to evaluate AWS accounts.

It takes only a couple of minutes to evaluate your AWS account for the latest CIS benchmark. Below we will walkthrough how to create your always-free Pipes Developer account, connect your first AWS account, and run your first assessment.

Run an AWS CIS v3.0 assessment

If you’re new to Pipes, sign up at https://pipes.turbot.com. Then create your first workspace.

Next, we'll connect an AWS account to Turbot Pipes, whether using a cross-account AWS IAM role or using an AWS IAM access key.

Add a Turbot Pipes connection

Next, install the AWS Compliance mod which contains the AWS CIS v3.0 dashboard. Instant one-click installation:

Install the Steampipe AWS Compliance mod

Finally, go to the Dashboard page, select AWS CIS v3.0 from the list of available dashboards from the AWS Compliance section.

View the AWS CIS v3.0 dashboard in Turbot Pipes

Share the AWS CIS v3.0.0 assessment with your team

In the free Developer account you can create point-in-time snapshots of your CIS dashboard and share it via a secure link with your team.

Capture a one-time snapshot, or create a schedule to programmatically snapshot periodically.

Create a recurring AWS CIS Assessment report in Turbot Pipes

Optionally send summary notifications with your team via Slack or Microsoft Teams.

Send AWS CIS Assessment notifications to Slack or Microsoft Teams

Enable cloud intelligence for your organization

Use the always-free Turbot Pipes Developer tier to assess your own AWS accounts. When you are ready to bring your team and expand your usage, sign up for the Pipes Team tier in a 14-day free trial.

We would love to hear your feedback as you go. Send us a message in the #pipes channel of our Slack community.