FAQ
-
Can I add my own compliance program
Yes. Custom compliance programs and controls can be defined from the Aqua CSPM console.
Fri, 28 May, 2021 at 1:50 AM -
Can I export my CSPM report data
Yes, you can export both scan reports of cloud accounts and organization-wide reports. Exporting scan reports Scan reports can be exported as CSV or PD...
Mon, 18 Oct, 2021 at 9:36 AM -
Does the CloudFormation scanner support JSON and YAML CloudFormation templates
Yes. Please note that YAML templates are converted to JSON using the cfn-flip utility, which may lack support for some custom AWS-specific YAML properties.
Wed, 12 Aug, 2020 at 9:22 AM -
Does CSPM support scanning Terraform templates
Yes. CSPM supports Terraform template security scans. To use this feature, navigate to "Tools" > "Terraform Scan." From this page you...
Wed, 12 Aug, 2020 at 9:22 AM -
How does CSPM connect to my AWS account?
CSPM uses the AWS-recommended best practice for connecting: a third-party cross-account role with an external ID and IP restriction. This is an IAM role tha...
Wed, 12 Aug, 2020 at 9:22 AM -
Are CSPM plugins open source
Yes. All of CSPM's plugins are available https://github.com/aquasecurity/cloudsploit/tree/master/plugins
Wed, 16 Sep, 2020 at 3:56 PM -
What parts of CSPM are open source
CSPM's core scanning engine, which includes its data collection and security analysis plugins are fully open source. Aqua CSPM's SaaS product prov...
Fri, 28 May, 2021 at 1:51 AM -
Do compliance reports scan for all controls associated with a compliance program
No. Most compliance programs have specific requirements that are either non-technical in nature (i.e. a process) or that cannot be audited by using the clou...
Wed, 19 Aug, 2020 at 3:30 PM -
How does Aqua CSPM compare to AWS security tools
Unlike many of the built-in AWS cloud provider tools, such as AWS Security Hub, Config Service, and Trusted Advisor, the Aqua is a complete end-to-end cloud...
Fri, 28 May, 2021 at 1:53 AM -
How can I limit API access by IP address
In the API Keys page, add an additional field for defining a set of allowed IPs and IP ranges. If the field is empty then all IPs are allowed. Enforce the I...
Mon, 15 Mar, 2021 at 11:56 AM