Skip to main content

Cloud Compliance

Cloud Compliance is the framework-based cloud scanning surface in Cloudgeni. Use it when you want a control or requirement view of live cloud posture rather than raw provider findings or repository-only scan output.

Where It Lives

Open Compliance & Security, stay on Findings, and use Data Sources to select the cloud or cluster integration whose framework findings you want to review. Programmatically, the backing scan flow is the cloud infra scan API with the prowler-ocsf analysis engine.

What You Need First

  • An active cloud integration
  • Enough read access to inventory the account meaningfully
Git is not required to view framework findings, but it becomes important once you want to remediate through repository changes.

What The View Gives You

The compliance view includes:
  • Cloud or cluster data-source selection
  • Framework selection
  • Requirement-oriented findings
  • Search and filtering
  • Severity summaries
  • PDF export
That makes it a better fit for posture review and audit preparation than the cloud monitor view.

What It Is Not

Cloud Compliance helps you map findings to frameworks. It does not issue certification or attestation on its own. Treat it as an operational evidence and prioritization surface.

Framework Coverage

Framework availability varies by provider. See Compliance Frameworks for the provider-to-framework matrix.

Compliance Frameworks

See which frameworks are available for each provider.

Cloud Monitors

Use native provider findings when you want raw AWS Security Hub or Azure Defender signals.