Directories
¶
| Path | Synopsis |
|---|---|
|
aws
|
|
|
cloudtrail
Package cloudtrail implements the aws.cloudtrail source plugin: lists CloudTrail trails in one AWS account along with each trail's logging status, and emits cloudtrail_trail evidence records suitable for SOC 2 audit-logging policies (multi-region coverage, logging enablement, log file validation).
|
Package cloudtrail implements the aws.cloudtrail source plugin: lists CloudTrail trails in one AWS account along with each trail's logging status, and emits cloudtrail_trail evidence records suitable for SOC 2 audit-logging policies (multi-region coverage, logging enablement, log file validation). |
|
cloudwatch
Package cloudwatch implements the aws.cloudwatch source plugin: lists CloudWatch Logs log groups in one AWS account and emits cloudwatch_log_group evidence records suitable for SOC 2 audit-logging policies (retention configured, encryption at rest).
|
Package cloudwatch implements the aws.cloudwatch source plugin: lists CloudWatch Logs log groups in one AWS account and emits cloudwatch_log_group evidence records suitable for SOC 2 audit-logging policies (retention configured, encryption at rest). |
|
config
Package config implements the aws.config source plugin: lists AWS Config configuration recorders along with their recording status, and emits config_recorder evidence records suitable for SOC 2 change-tracking policies (Config recorder enabled and recording).
|
Package config implements the aws.config source plugin: lists AWS Config configuration recorders along with their recording status, and emits config_recorder evidence records suitable for SOC 2 change-tracking policies (Config recorder enabled and recording). |
|
ec2
Package ec2 implements the aws.ec2 source plugin: lists EC2 instances in one AWS account and emits ec2_instance evidence records carrying the network-exposure attributes that SOC 2 CC6.6 policies consume.
|
Package ec2 implements the aws.ec2 source plugin: lists EC2 instances in one AWS account and emits ec2_instance evidence records carrying the network-exposure attributes that SOC 2 CC6.6 policies consume. |
|
eks
Package eks implements the aws.eks source plugin: lists EKS clusters in one AWS account and emits eks_cluster evidence records carrying the secrets-envelope-encryption attributes that SOC 2 CC6.7 policies consume.
|
Package eks implements the aws.eks source plugin: lists EKS clusters in one AWS account and emits eks_cluster evidence records carrying the secrets-envelope-encryption attributes that SOC 2 CC6.7 policies consume. |
|
guardduty
Package guardduty implements the aws.guardduty source plugin: lists GuardDuty detectors in one AWS account along with each detector's status, and emits guardduty_detector evidence records suitable for SOC 2 threat-detection policies (GuardDuty enabled).
|
Package guardduty implements the aws.guardduty source plugin: lists GuardDuty detectors in one AWS account along with each detector's status, and emits guardduty_detector evidence records suitable for SOC 2 threat-detection policies (GuardDuty enabled). |
|
iam
Package iam implements the aws.iam source plugin: lists IAM users from one AWS account and emits user_record evidence records suitable for SOC 2 user-directory policies (MFA enforcement, inactive users, admin coverage, …).
|
Package iam implements the aws.iam source plugin: lists IAM users from one AWS account and emits user_record evidence records suitable for SOC 2 user-directory policies (MFA enforcement, inactive users, admin coverage, …). |
|
kms
Package kms implements the aws.kms source plugin: lists KMS keys in one AWS account and emits kms_key evidence records carrying the rotation and manager attributes that SOC 2 CC6.7 policies consume.
|
Package kms implements the aws.kms source plugin: lists KMS keys in one AWS account and emits kms_key evidence records carrying the rotation and manager attributes that SOC 2 CC6.7 policies consume. |
|
rds
Package rds implements the aws.rds source plugin: lists RDS DB instances in one AWS account and emits rds_instance evidence records carrying encryption and engine attributes that SOC 2 CC6.7 policies consume.
|
Package rds implements the aws.rds source plugin: lists RDS DB instances in one AWS account and emits rds_instance evidence records carrying encryption and engine attributes that SOC 2 CC6.7 policies consume. |
|
s3
Package s3 implements the aws.s3 source plugin: lists S3 buckets in one AWS account and emits s3_bucket evidence records carrying the security-relevant default-encryption attributes that SOC 2 CC6.7 policies consume.
|
Package s3 implements the aws.s3 source plugin: lists S3 buckets in one AWS account and emits s3_bucket evidence records carrying the security-relevant default-encryption attributes that SOC 2 CC6.7 policies consume. |
|
gcp
|
|
|
compute
Package compute implements the gcp.compute source plugin: lists Compute Engine VM instances across every zone in a project and emits one compute_instance evidence record per VM so SOC 2 policies can flag misconfigurations (default service account, shielded-VM off, public IP, OS-Login disabled, …).
|
Package compute implements the gcp.compute source plugin: lists Compute Engine VM instances across every zone in a project and emits one compute_instance evidence record per VM so SOC 2 policies can flag misconfigurations (default service account, shielded-VM off, public IP, OS-Login disabled, …). |
|
iam
Package iam implements the gcp.iam source plugin: fetches the project-level IAM policy from Cloud Resource Manager and emits one gcp_iam_binding evidence record per (role, member) pair so SOC 2 least-privilege policies can flag (e.g.) `roles/owner` granted to individual users.
|
Package iam implements the gcp.iam source plugin: fetches the project-level IAM policy from Cloud Resource Manager and emits one gcp_iam_binding evidence record per (role, member) pair so SOC 2 least-privilege policies can flag (e.g.) `roles/owner` granted to individual users. |
|
sql
Package sql implements the gcp.sql source plugin: lists Cloud SQL instances in a project and emits one cloudsql_instance evidence record per instance so SOC 2 database-hardening policies can flag missing SSL enforcement, public IPv4, automated backups off, etc.
|
Package sql implements the gcp.sql source plugin: lists Cloud SQL instances in a project and emits one cloudsql_instance evidence record per instance so SOC 2 database-hardening policies can flag missing SSL enforcement, public IPv4, automated backups off, etc. |
|
storage
Package storage implements the gcp.storage source plugin: lists all GCS buckets in a project and emits a gcs_bucket evidence record per bucket so SOC 2 storage-hardening policies (uniform-bucket-level access, versioning, retention, public access prevention) can check configuration.
|
Package storage implements the gcp.storage source plugin: lists all GCS buckets in a project and emits a gcs_bucket evidence record per bucket so SOC 2 storage-hardening policies (uniform-bucket-level access, versioning, retention, public access prevention) can check configuration. |
|
Package github implements the github source plugin: lists repositories and organization members from a single GitHub organization and emits two evidence types — github_repository and github_org_member — suitable for SOC 2 branch-protection and 2FA coverage policies.
|
Package github implements the github source plugin: lists repositories and organization members from a single GitHub organization and emits two evidence types — github_repository and github_org_member — suitable for SOC 2 branch-protection and 2FA coverage policies. |
|
Package manual implements the manual.pdf source plugin: a project- level singleton that reads customer-uploaded PDFs from the project's configured manual-evidence backend and emits a small signed_document manifest record for each.
|
Package manual implements the manual.pdf source plugin: a project- level singleton that reads customer-uploaded PDFs from the project's configured manual-evidence backend and emits a small signed_document manifest record for each. |
|
Package okta implements the okta source plugin: lists users and applications from a single Okta organization and emits two evidence types — okta_user and okta_app — suitable for SOC 2 MFA coverage policies.
|
Package okta implements the okta source plugin: lists users and applications from a single Okta organization and emits two evidence types — okta_user and okta_app — suitable for SOC 2 MFA coverage policies. |
Click to show internal directories.
Click to hide internal directories.