CSPM

Can I add my own compliance program
Yes. Custom compliance programs and controls can be defined from the Aqua Wave CSPM console.
Wed, 12 Aug, 2020 at 9:22 AM
Can I export my CSPM report data
Yes. Scan reports can be exported as CSV or PDF. Org-Wide reports can be exported to CSV in multiple formats.
Wed, 12 Aug, 2020 at 9:22 AM
Does the CloudFormation scanner support JSON and YAML CloudFormation templates
Yes. Please note that YAML templates are converted to JSON using the cfn-flip utility, which may lack support for some custom AWS-specific YAML properties.
Wed, 12 Aug, 2020 at 9:22 AM
Does CSPM support scanning Terraform templates
Yes. CSPM supports Terraform template security scans. To use this feature, navigate to "Tools" > "Terraform Scan." From this page you...
Wed, 12 Aug, 2020 at 9:22 AM
How does CSPM connect to my AWS account?
CSPM uses the AWS-recommended best practice for connecting: a third-party cross-account role with an external ID and IP restriction. This is an IAM role tha...
Wed, 12 Aug, 2020 at 9:22 AM
Are CSPM plugins open source
Yes. All of CSPM's plugins are available https://github.com/aquasecurity/cloudsploit/tree/master/plugins
Wed, 16 Sep, 2020 at 3:56 PM
What parts of CSPM are open source
CSPM's core scanning engine, which includes its data collection and security analysis plugins are fully open source. Aqua Wave CSPM's SaaS product...
Wed, 12 Aug, 2020 at 9:22 AM
Do compliance reports scan for all controls associated with a compliance program
No. Most compliance programs have specific requirements that are either non-technical in nature (i.e. a process) or that cannot be audited by using the clou...
Wed, 19 Aug, 2020 at 3:30 PM
How does Aqua Wave CSPM compare to AWS security tools
Unlike many of the built-in AWS cloud provider tools, such as AWS Security Hub, Config Service, and Trusted Advisor, Aqua Wave is a complete end-to-end clou...
Tue, 8 Sep, 2020 at 5:02 PM