At AWS re:Invent? Bring your audit questions to Anton Babenko.Meet Anton at AWS re:InventAsk for a time
Sign in
Menu
Start free
The trial

Start free on CIS AWS. Add every framework with a 30-day trial.

Replace one line in a module source. The module arrives with the controls for your frameworks set before terraform apply.

No credit card or AWS Marketplace subscription needed. Sign up and verify your email.

Already have an account? Sign in

The trial

For
You, on Terraform
Plan
Free: CIS AWS Foundations, with no end date
Trial
30 days of every framework, one per account, started when you choose
Price
$0
1

What the trial includes

1.1

Every framework

All 36 frameworks in the catalog, SOC 2, HIPAA and PCI DSS among them. Modules enforce 179 of the 296 controls in the documented catalog; the rest are listed with their clauses. Browse frameworks.

1.2

The modules you already use

Modules from terraform-aws-modules, among them S3, VPC, EKS, RDS, Lambda and ALB. Same inputs and outputs. Module catalog.

1.3

The org console

Org endpoint, environments, snapshots, promotion log, members and tokens.

1.4

Registry access

API token authentication. A daily request limit applies during the trial. Paid plans have none. Registry setup.

2

From sign-up to the first plan

2.1

Create the account

Sign up and verify your email. The account starts on Free, with CIS AWS. Start the 30-day trial on this page when you want every framework. The quick start guide takes it from there.

2.2

Create a registry token

In the org console, create a token so Terraform can download modules from the private registry.

2.3

Change one source line and plan

Point one module at the framework host. No state migration.

-  source  = "terraform-aws-modules/s3-bucket/aws"
+  source  = "soc2.compliance.tf/terraform-aws-modules/s3-bucket/aws"
   version = "~> 5.0"
terraform init
terraform plan

For s3-bucket, the module now sets encryption at rest, blocks public access, and turns on versioning and access logging. Existing estate? The migration guide has per-module playbooks.

When the 30 days end, you choose.

Buy Full Access on AWS Marketplace, or ask for an Enterprise quote.

3

After the trial

3.1

Full Access

$1,000 a year, bought through AWS Marketplace. The charge appears on your AWS invoice.

3.2

Enterprise

The estate license: one baseline from one org endpoint, with custom frameworks, custom controls and priority support. Price on request.

3.3

Without a subscription

The account moves to the Free plan; the schedule of fees lists what it covers. Deployed infrastructure and cached modules keep working.