{"id":18995547,"url":"https://github.com/turbot/flowpipe-mod-aws-cis","last_synced_at":"2026-04-16T05:30:18.623Z","repository":{"id":259242144,"uuid":"874380655","full_name":"turbot/flowpipe-mod-aws-cis","owner":"turbot","description":"Run pipelines to detect and correct AWS resources that are non-compliant with CIS benchmarks.","archived":false,"fork":false,"pushed_at":"2024-11-28T08:06:52.000Z","size":127,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":7,"default_branch":"main","last_synced_at":"2025-01-01T16:24:00.848Z","etag":null,"topics":["aws","cis","compliance","flowpipe","flowpipe-mod","low-code","security"],"latest_commit_sha":null,"homepage":"https://hub.flowpipe.io/mods/turbot/aws_cis","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/turbot.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-10-17T18:12:44.000Z","updated_at":"2024-11-28T08:06:27.000Z","dependencies_parsed_at":"2024-10-23T20:34:04.260Z","dependency_job_id":"f133e477-60c2-4377-a1fb-b89250b2d4cd","html_url":"https://github.com/turbot/flowpipe-mod-aws-cis","commit_stats":null,"previous_names":["turbot/flowpipe-mod-aws-cis"],"tags_count":6,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/turbot%2Fflowpipe-mod-aws-cis","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/turbot%2Fflowpipe-mod-aws-cis/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/turbot%2Fflowpipe-mod-aws-cis/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/turbot%2Fflowpipe-mod-aws-cis/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/turbot","download_url":"https://codeload.github.com/turbot/flowpipe-mod-aws-cis/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":240010509,"owners_count":19733514,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","cis","compliance","flowpipe","flowpipe-mod","low-code","security"],"created_at":"2024-11-08T17:31:33.495Z","updated_at":"2026-04-16T05:30:18.569Z","avatar_url":"https://github.com/turbot.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"# AWS CIS Mod for Flowpipe\n\nPipelines to detect and remediate AWS resources non-compliant with CIS benchmarks.\n\n## Documentation\n\n- **[Pipelines →](https://hub.flowpipe.io/mods/turbot/aws_cis/pipelines)**\n\n## Getting Started\n\n### Requirements\n\nDocker daemon must be installed and running. Please see [Install Docker Engine](https://docs.docker.com/engine/install/) for more information.\n\n### Installation\n\nDownload and install Flowpipe (https://flowpipe.io/downloads) and Steampipe (https://steampipe.io/downloads). Or use Brew:\n\n```sh\nbrew install turbot/tap/flowpipe\nbrew install turbot/tap/steampipe\n```\n\nInstall the AWS plugin with [Steampipe](https://steampipe.io):\n\n```sh\nsteampipe plugin install aws\n```\n\nSteampipe will automatically use your default AWS credentials. Optionally, you can [setup multiple accounts](https://hub.steampipe.io/plugins/turbot/aws#multi-account-connections) or [customize AWS credentials](https://hub.steampipe.io/plugins/turbot/aws#configuring-aws-credentials).\n\nCreate a `connection_import` resource to import your Steampipe AWS connections:\n\n```sh\nvi ~/.flowpipe/config/aws.fpc\n```\n\n```hcl\nconnection_import \"aws\" {\n  source      = \"~/.steampipe/config/aws.spc\"\n  connections = [\"*\"]\n}\n```\n\nFor more information on importing connections, please see [Connection Import](https://flowpipe.io/docs/reference/config-files/connection_import).\n\nFor more information on connections in Flowpipe, please see [Managing Connections](https://flowpipe.io/docs/run/connections).\n\nInstall the mod:\n\n```sh\nmkdir aws-cis\ncd aws-cis\nflowpipe mod install github.com/turbot/flowpipe-mod-aws-cis\n```\n\n### Running CIS Pipelines\n\nTo run your first CIS pipeline, you'll need to ensure your Steampipe server is up and running:\n\n```sh\nsteampipe service start\n```\n\nTo find your desired CIS pipeline, you can filter the `pipeline list` output:\n\n```sh\nflowpipe pipeline list | grep \"cis\"\n```\n\nThen run your chosen pipeline:\n\n```sh\nflowpipe pipeline run aws_cis.pipeline.cis_v400\n```\n\nBy default the above approach would find the relevant resources and then send a message to your configured [notifier](https://flowpipe.io/docs/reference/config-files/notifier).\n\n### Configure Variables\n\nSeveral pipelines have [input variables](https://flowpipe.io/docs/build/mod-variables#input-variables) that can be configured to better match your environment and requirements.\n\nThe easiest approach is to setup your `flowpipe.fpvars` file, starting with the example file:\n\n```sh\ncp flowpipe.fpvars.example flowpipe.fpvars\nvi flowpipe.fpvars\n```\n\nAlternatively, you can pass variables on the command line:\n\n```sh\nflowpipe pipeline run aws_cis.pipeline.cis_v400 --var notifier=notifier.default\n```\n\nOr through environment variables:\n\n```sh\nexport FP_VAR_notifier=\"notifier.default\"\nflowpipe pipeline run aws_cis.pipeline.cis_v400\n```\n\nFor more information, please see [Passing Input Variables](https://flowpipe.io/docs/build/mod-variables#passing-input-variables)\n\n## Open Source \u0026 Contributing\n\nThis repository is published under the [Apache 2.0 license](https://www.apache.org/licenses/LICENSE-2.0). Please see our [code of conduct](https://github.com/turbot/.github/blob/main/CODE_OF_CONDUCT.md). We look forward to collaborating with you!\n\n[Flowpipe](https://flowpipe.io) and [Steampipe](https://steampipe.io) are products produced from this open source software, exclusively by [Turbot HQ, Inc](https://turbot.com). They are distributed under our commercial terms. Others are allowed to make their own distribution of the software, but cannot use any of the Turbot trademarks, cloud services, etc. You can learn more in our [Open Source FAQ](https://turbot.com/open-source).\n\n## Get Involved\n\n**[Join #flowpipe on Slack →](https://turbot.com/community/join)**\n\nWant to help but don't know where to start? Pick up one of the `help wanted` issues:\n\n- [Flowpipe](https://github.com/turbot/flowpipe/labels/help%20wanted)\n- [AWS CIS Mod](https://github.com/turbot/flowpipe-mod-aws-cis/labels/help%20wanted)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fturbot%2Fflowpipe-mod-aws-cis","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fturbot%2Fflowpipe-mod-aws-cis","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fturbot%2Fflowpipe-mod-aws-cis/lists"}