{"adoption": {"forks": 379, "observed_at": "2026-08-28T04:03:57.989293+00:00", "stars": 1200}, "canonical_url": "https://ross.abutalabs.com/products/terraform-aws-secure-baseline", "card": {"archived": false, "artifact_type": "infra-config", "description": "Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.", "domain": ["security", "cloud-computing", "infrastructure-as-code", "self-hosted"], "enriched": true, "function": ["security", "monitoring", "logging", "alerting", "infrastructure-as-code", "configuration-management"], "health_score": 75, "homepage": null, "language": "HCL", "license": "MIT", "license_family": "permissive", "maturity": "active", "member_repos": ["nozaq/terraform-aws-secure-baseline"], "name": "nozaq/terraform-aws-secure-baseline", "platform": ["cloud"], "pushed_at": "2026-07-08T09:36:36+00:00", "repo": "nozaq/terraform-aws-secure-baseline", "stars": 1200, "tags": ["terraform-module", "aws", "cis-benchmark", "security-hardening", "cloudtrail", "guardduty", "securityhub", "aws-config", "baseline-configuration", "devops", "terraform"], "topics": ["terraform", "aws", "security", "security-hardening", "terraform-modules", "hardening", "cis-benchmark", "aws-auditing", "security-tools", "devops", "terraform-module"], "urls": [], "use_cases": ["harden a new AWS account against CIS benchmarks", "enable CloudTrail and GuardDuty across all regions with Terraform", "set up AWS Config and SecurityHub automatically", "apply IAM password policies and access analyzer to an AWS account", "audit and secure default VPCs and security groups", "centralize encrypted audit logs in S3 with Glacier archiving"], "what_it_is": "A Terraform module that applies a secure baseline configuration to AWS accounts based on CIS Foundations and AWS Foundational Security Best Practices benchmarks. It automates IAM hardening, CloudTrail logging, GuardDuty, SecurityHub, AWS Config, and VPC security defaults across regions.", "when_to_avoid": ["you use a cloud provider other than AWS", "you need a runtime security monitoring product rather than infrastructure provisioning", "your organization requires a custom security framework not covered by CIS or AWS FSBP"], "when_to_choose": ["you want a repeatable, code-defined security baseline for AWS accounts", "you need CIS benchmark compliance coverage applied via Terraform", "you are bootstrapping multi-region AWS security tooling"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/terraform-aws-secure-baseline", "repo": "nozaq/terraform-aws-secure-baseline", "role": "main", "score": 64}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:03:57.989293+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T06:20:50.450710+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cc2d28581906995af9fd747943c9705fd122c7239e66a1ac837de2665276314", "fetched_at": "2026-08-28T04:03:57.989293+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nozaq/terraform-aws-secure-baseline"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:03:57.989293+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T06:20:50.450710+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cc2d28581906995af9fd747943c9705fd122c7239e66a1ac837de2665276314", "fetched_at": "2026-08-28T04:03:57.989293+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nozaq/terraform-aws-secure-baseline"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T06:20:50.450710+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cc2d28581906995af9fd747943c9705fd122c7239e66a1ac837de2665276314", "fetched_at": "2026-08-28T04:03:57.989293+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nozaq/terraform-aws-secure-baseline"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:03:57.989293+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:03:57.989293+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:03:57.989293+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T06:20:50.450710+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cc2d28581906995af9fd747943c9705fd122c7239e66a1ac837de2665276314", "fetched_at": "2026-08-28T04:03:57.989293+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nozaq/terraform-aws-secure-baseline"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:03:57.989293+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:03:57.989293+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T06:20:50.450710+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cc2d28581906995af9fd747943c9705fd122c7239e66a1ac837de2665276314", "fetched_at": "2026-08-28T04:03:57.989293+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nozaq/terraform-aws-secure-baseline"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:03:57.989293+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:03:57.989293+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:03:57.989293+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T06:20:50.450710+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cc2d28581906995af9fd747943c9705fd122c7239e66a1ac837de2665276314", "fetched_at": "2026-08-28T04:03:57.989293+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nozaq/terraform-aws-secure-baseline"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:03:57.989293+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:03:57.989293+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T06:20:50.450710+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cc2d28581906995af9fd747943c9705fd122c7239e66a1ac837de2665276314", "fetched_at": "2026-08-28T04:03:57.989293+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nozaq/terraform-aws-secure-baseline"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T06:20:50.450710+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cc2d28581906995af9fd747943c9705fd122c7239e66a1ac837de2665276314", "fetched_at": "2026-08-28T04:03:57.989293+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nozaq/terraform-aws-secure-baseline"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T06:20:50.450710+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cc2d28581906995af9fd747943c9705fd122c7239e66a1ac837de2665276314", "fetched_at": "2026-08-28T04:03:57.989293+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nozaq/terraform-aws-secure-baseline"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T06:20:50.450710+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6cc2d28581906995af9fd747943c9705fd122c7239e66a1ac837de2665276314", "fetched_at": "2026-08-28T04:03:57.989293+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nozaq/terraform-aws-secure-baseline"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 91, "longevity": 100, "rhythm": 8}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 3124, "days_push": 56, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 64, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}