Cloud Security Posture Management (CSPM)
Architecture & DesignCloud Security Posture Management (CSPM) refers to tools that continuously monitor cloud environments for security misconfigurations, compliance violations, and risks. CSPM automates what would otherwise be manual security audits.
AWS CSPM Capabilities
- Security Hub: automated compliance checks, security scoring, finding aggregation, historical trends
- AWS Config: continuous configuration monitoring with hundreds of managed rules
- IAM Access Analyzer: identifies resources shared with external entities
- Inspector: vulnerability scanning (CVEs, SAST, SCA, IaC)
Related AWS Services
Related Terms
AWS service that aggregates security findings from GuardDuty, Inspector, Macie, and third-party tools into a single dashboard with compliance scoring.
Meeting regulatory requirements and industry standards (SOC 2, HIPAA, GDPR, PCI DSS, CIS) for data protection, access control, and security practices in the cloud.
A preventive or detective control that enforces security boundaries across AWS accounts, implemented through SCPs, AWS Config rules, or Security Hub standards.
Toc Consulting: AWS Security & Cloud Architecture
Securing your AWS estate?
Our team helps engineering teams secure and architect AWS the right way: assessment in week one, a prioritized action plan in week two.