nozaq/terraform-aws-secure-baseline resource

Health v2 · maintenance only

Adoption not part of the score

1200 stars · 379 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Terraform module that applies a secure baseline configuration to AWS accounts based on CIS Foundations and AWS Foundational Security Best Practices benchmarks. It automates IAM hardening, CloudTrail logging, GuardDuty, SecurityHub, AWS Config, and VPC security defaults across regions.

Use cases

• harden a new AWS account against CIS benchmarks
• enable CloudTrail and GuardDuty across all regions with Terraform
• set up AWS Config and SecurityHub automatically
• apply IAM password policies and access analyzer to an AWS account
• audit and secure default VPCs and security groups
• centralize encrypted audit logs in S3 with Glacier archiving

When to choose

• you want a repeatable, code-defined security baseline for AWS accounts
• you need CIS benchmark compliance coverage applied via Terraform
• you are bootstrapping multi-region AWS security tooling

When to avoid

• you use a cloud provider other than AWS
• you need a runtime security monitoring product rather than infrastructure provisioning
• your organization requires a custom security framework not covered by CIS or AWS FSBP

Facets

infra-config · maturity active

security monitoring logging alerting infrastructure-as-code configuration-management security cloud-computing infrastructure-as-code self-hosted cloud terraform-module aws cis-benchmark security-hardening cloudtrail guardduty securityhub aws-config baseline-configuration devops terraform

Member repositories

For agents

markdown · JSON · MCP: product_card(name="nozaq/terraform-aws-secure-baseline")