Added
View All Tags
Stax Rule Bundles now provide AWS Console remediation guidance, offering organizations actionable steps to address rule violations and maintain compliance. Refer to our guide for more details.
To gain detailed insights into your AWS cost information, or to feed billing information into third-party tools, you can now opt-in to have your Stax-managed AWS Cost and Usage Reports (CURs) exported directly to an S3 bucket in your AWS Organization's logging account. To find out more, see Opt-in to Stax-managed CUR export to the Logging Accountin the docs.
In addition to viewing your rule-level compliance score based on passing and failing rules, Stax Compliance users can now view compliance scores calculated by the number of passing/failing resources. This new resource-level compliance view enables resource-focused operational insights and remediation.
Choose the vertical ellipsis (⋮) under the summary results on the Rule page to change how the compliance score is calculated. See our guide for more details.
Stax Notifications now supports the ability to create multiple of the same notification types for any delivery channel. This change provides greater flexibility and personalization and makes managing your Stax Cost & Compliance notifications much easier. See Manage Notifications for more details.
The NIST Cybersecurity Framework Rule Bundle is now available to all organizations. This Bundle is designed to help customers fortify their AWS environment against cyber threats and strengthen their security posture.
The new bundle currently includes 86 controls and over 16 new rules, with more to be added during the preview phase.
Add the Bundle to your Stax console to get started. Once added, Stax will perform an initial evaluation and populate the Rules page with new results. You can filter the page to show only results from the NIST Cybersecurity Framework bundle if preferred. Alternatively, to add any of the new rules to your Organization Rule Bundle, head to the Rules Catalog page.
OUs can now be managed from within Stax and SCPs can now be attached to OUs and individual accounts. For more information, see the documentation.
The Australian Cyber Security Centre Essential Eight Rule Bundle is now available to all organizations. This Bundle is designed to help customers fortify their AWS environment against cyber threats and strengthen their security posture.
The new Stax Compliance ACSC Essential Eight Rule Bundle includes 42 controls and 16 new rules.
Add the Bundle to Stax to get going. Once added, Stax will perform an initial evaluation and populate the Rules page with new results. You can filter the page to show only results from the Essential Eight bundle if preferred. Alternatively, to add any of the new rules to your Organization Rule Bundle, head to the Rules Catalog page.
The 0.1.0 release of the Stax Terraform provider marks the completion of support for the initial set of Stax resources.
Guidance for common tasks using the Terraform provider is available on the Terraform Registry:
For more information and to get started, see About the Stax Terraform Provider.
A new Rule "S3 block public bucket account setting should be enabled" has been introduced to the S3 Best Practice Version 1.1 and PCI DSS Rule Bundles.
The rule checks whether the block public access setting is enabled at the account level.
To add this rule to your Organization Rule Bundle, head to the Rules Catalog page.
The National Institute of Standards and Technology (NIST) Privacy Framework Rule Bundle is now available in private preview. This Bundle is designed to help organizations improve their privacy practices through effective risk management. To learn more about the private preview, refer to our guide.