Skip to content

gebalamariusz/cloud-audit

v1.2.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 2mo Vulnerability Scanning
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

audit aws aws-audit aws-security cis-benchmarks cli
+13 more
cloud-security compliance devops security iam iac infrastructure-security open-source-security python python-cli security-scanner terraform vulnerability-scanning

Summary

AI summary

SOC 2 Type II readiness assessment and compliance reporting added.

Full changelog

SOC 2 Type II Compliance Framework

cloud-audit now supports SOC 2 Type II readiness assessment alongside CIS AWS v3.0.

What's new

  • SOC 2 Type II - 43 Trust Services Criteria mapped (AICPA 2017, revised 2022)
  • 24 criteria automated, 19 require manual review (governance, HR, incident response)
  • 78 of 80 checks mapped across 12 SOC 2 categories (CC1-CC9, A1, C1, PI1)
  • 20 attack chain rules mapped to SOC 2 controls they would violate
  • Auditor-ready HTML and Markdown compliance reports
  • Documentation

Usage

cloud-audit scan --compliance soc2_type2
cloud-audit scan --compliance soc2_type2 --format html --output soc2-report.html
cloud-audit list-frameworks

Full changelog

See CHANGELOG.md

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track gebalamariusz/cloud-audit

Get notified when new releases ship.

Sign up free

About gebalamariusz/cloud-audit

Open-source AWS security scanner with attack chain detection, breach cost estimation, and copy-paste remediation (CLI + Terraform). 47 checks, 16 attack chain rules. First free standalone AWS security MCP server.

All releases →

Related context

Earlier breaking changes

  • v2.2.0 Category enum gains THREAT value, separating active-abuse from SECURITY misconfigurations.

Beta — feedback welcome: [email protected]