audit-labs/control-coverage

 1{
 2  "subject": "acme",
 3  "platform": "aws",
 4  "source_package": "aws_audit_acme_2026-01-01",
 5  "generated_at": "2026-01-01 00:00:00 UTC",
 6  "summary": {"pass": 2, "fail": 1, "not_applicable": 0},
 7  "coverage": ["SOC2:CC6.1", "SOC2:CC6.6", "SOC2:CC7.2", "ISO:A.8.15"],
 8  "findings": [
 9    {
10      "id": "aws.iam.root-mfa",
11      "title": "Root account has MFA enabled",
12      "status": "pass",
13      "severity": "high",
14      "controls": ["SOC2:CC6.1", "ISO:A.5.17", "NIST:IA-2"],
15      "reason": "1 row asserted true",
16      "evidence": []
17    },
18    {
19      "id": "aws.ec2.no-open-sg",
20      "title": "No security group open to 0.0.0.0/0 on admin ports",
21      "status": "fail",
22      "severity": "high",
23      "controls": ["SOC2:CC6.6", "ISO:A.8.20", "NIST:SC-7"],
24      "reason": "2 rows failed the check",
25      "evidence": [{"group_id": "sg-1", "port": "22"}, {"group_id": "sg-2", "port": "3389"}]
26    },
27    {
28      "id": "aws.cloudtrail.enabled",
29      "title": "CloudTrail logging is enabled in all regions",
30      "status": "pass",
31      "severity": "high",
32      "controls": ["SOC2:CC7.2", "ISO:A.8.15", "NIST:AU-2"],
33      "reason": "1 row asserted true",
34      "evidence": []
35    },
36    {
37      "id": "aws.legacy.old-code",
38      "title": "Legacy control citing an unknown code",
39      "status": "pass",
40      "severity": "low",
41      "controls": ["SOC2:CC6.99"],
42      "reason": "for orphan-code testing",
43      "evidence": []
44    }
45  ]
46}