Welcome to Support Portal

TABLE OF CONTENTS

• Overview
• Default Compliance Programs
• Custom Compliance Programs
• Example screen

Overview

Aqua Hub offers compliance reports to match your cloud infrastructure scan results to industry standards and compliance controls.

At this time, the Aqua Hub Compliance page includes only CSPM misconfigurations. For detailed information, refer to the documentation in CSPM > Compliance.

Compliance reports include out-of-the-box / default reports for many compliance programs, see complete list below. Additionally, Aqua allows customers to build their custom compliance reports to match internal compliance policies and requirements.

Each compliance program is divided into controls which are in turn mapped to Aqua CSPM plugins. Each control will then report the plugin counts with the corresponding aggregated statuses for PASS, WARN, FAIL, or UNKW for unknown results.

Default Compliance Programs

The following compliance programs are supported by Default:

• APRA 234 Standard
• AWS CIS Benchmarks
• AWS Well-Architected Framework - Security
• Azure CIS Benchmarks
• BAIT
• CCPA
• COPPA
• FedRAMP
• FERPA
• FISMA
• GCP CIS Benchmarks
• General Data Protection Regulation (GDPR) EU
• HIPAA 
• HITRUST CSF
• ISO 27001
• ISO 27017
• ISO 27018
• LGPD
• Mitre AWS Attack Framework
• NIST 800-171
• NIST CSF
• NIST SP 800-53
• PCI Compliance
• SOC 2 Type 2
• SOC 3
• VAIT

See Generating Compliance Reports for more details.

Custom Compliance Programs

Aqua features the ability to create completely customized compliance programs to match your organization's requirements. To learn more, see Custom Compliance Reports.

Example screen