Managed Resources & Compliance Jumpstarts

Last updated March 16, 2023 21:23

Compliance Jumpstarts

Kion comes with compliance jumpstarts, so you can quickly start applying permissions and deploying resources right out-of-the-box. We provide our own reference library, which includes many common compliance resources, as well as complete sets of resources for established compliance frameworks.

You can import these Kion managed resources by navigating to Settings > System Settings > Kion Managed Resources.

This video quickly shows the process of implementing a compliance jumpstart and an overview of the included resources.

Available Frameworks

Reference Library. The Kion reference library jumpstarts. This includes common AWS IAM policies, AWS CloudFormation templates, Azure ARM templates, Azure policies, Azure role definitions, Google Cloud compliance checks, Cloud rules, Compliance checks, Compliance standards. Reimporting this library does not duplicate resources.
CIS. The resources that support compliance with CIS 1.2.0 for AWS. To use the resources, apply the included cloud rule: CIS 1.2.0 (AWS).
CIS-Azure. The resources that support compliance with CIS-Azure. To use the resources, apply the included cloud rule: CIS Azure 1.3.0.
CMMC. The resources that support compliance with CMMC versions 2.0 or 1.02. To use the resources, apply the included cloud rule: CMMC.
FedRAMP. The resources that support compliance with FedRAMP. To use the resources, apply the included cloud rule: FEDRAMP.
HIPAA. The resources that support compliance with HIPAA. To use the resources, apply the included cloud rule: HIPAA.
ISO/IEC 27001:2013. The resources that support compliance with ISO/IEC 27001:2013. To use the resources, apply the included cloud rule: ISO IEC 27001.
NIST Cybersecurity Framework. The resources that support compliance with NIST Cybersecurity Framework version 1.1. To use the resources, apply the included cloud rule: NIST CSF.
NIST 800-53 Revision 4. The resources that support compliance with NIST 800-53 Revision 4. To use the resources, apply the included cloud rule: NIST-800-53-Rev4. The CFTs, policies, etc. that are required for this cloud rule are included when you download the resources.
NIST 800-171 Revision 2. The resources that support compliance with NIST 800-171 Revision 2. To use the resources, apply the included cloud rule: NIST-800-171-Rev2.
SOC 2. The resources that support compliance with SOC 2. To use the resources, apply the included cloud rule: SOC 2.
PCI DSS v3.2.1. The resources that support compliance with PCI DSS 3.2.1. To use the resources, apply the included cloud rule: PCI DSS v3.2.1.
MITRE ATT&CK Framework. The resources that support compliance with the MITRE ATT&CK Framework. To use the resources, apply the included cloud rule: MITRE ATT&CK Framework.