Start free on CIS AWS. Add every framework with a 30-day trial.
Replace one line in a module source. The module arrives with the controls for your frameworks set before terraform apply.
No credit card or AWS Marketplace subscription needed. Sign up and verify your email.
Already have an account? Sign in
The trial
- For
- You, on Terraform
- Plan
- Free: CIS AWS Foundations, with no end date
- Trial
- 30 days of every framework, one per account, started when you choose
- Price
- $0
What the trial includes
Every framework
All 36 frameworks in the catalog, SOC 2, HIPAA and PCI DSS among them. Modules enforce 179 of the 296 controls in the documented catalog; the rest are listed with their clauses. Browse frameworks.
The modules you already use
Modules from terraform-aws-modules, among them S3, VPC, EKS, RDS, Lambda and ALB. Same inputs and outputs. Module catalog.
The org console
Org endpoint, environments, snapshots, promotion log, members and tokens.
Registry access
API token authentication. A daily request limit applies during the trial. Paid plans have none. Registry setup.
From sign-up to the first plan
Create the account
Sign up and verify your email. The account starts on Free, with CIS AWS. Start the 30-day trial on this page when you want every framework. The quick start guide takes it from there.
Create a registry token
In the org console, create a token so Terraform can download modules from the private registry.
Change one source line and plan
Point one module at the framework host. No state migration.
- source = "terraform-aws-modules/s3-bucket/aws" + source = "soc2.compliance.tf/terraform-aws-modules/s3-bucket/aws" version = "~> 5.0"
terraform init terraform plan
For s3-bucket, the module now sets encryption at rest, blocks public access, and turns on versioning and access logging. Existing estate? The migration guide has per-module playbooks.
When the 30 days end, you choose.
Buy Full Access on AWS Marketplace, or ask for an Enterprise quote.
After the trial
Full Access
$1,000 a year, bought through AWS Marketplace. The charge appears on your AWS invoice.
Enterprise
The estate license: one baseline from one org endpoint, with custom frameworks, custom controls and priority support. Price on request.
Without a subscription
The account moves to the Free plan; the schedule of fees lists what it covers. Deployed infrastructure and cached modules keep working.