Manage compliance assessment profiles

Automate Application Security compliance assessments with Terraform.

Automate recurring compliance audits for your IaC repositories and CI/CD assets by managing Compliance Assessment Profiles through Terraform. As new Asset Groups are provisioned, Terraform automatically schedules audits and configures report distribution.

Note

For a complete list of supported IaC and CI/CD compliance standards, as well as rule mapping logic and available scan types, refer to Compliance for Cortex Cloud Application Security.

Prerequisite

You must have an existing Asset Group ID (representing your IaC repos or CI/CD pipelines) and the ID of the Compliance Standard you wish to assess against.

Configuration

Use the cortexcloud_compliance_assessment_profile resource to define the target standard, the assets to scan, and the automated reporting schedule using standard Cron syntax.

 # Compliance assessment profile for IaC
resource "cortexcloud_compliance_assessment_profile" "monthly_iac_compliance" {
  name             = "Monthly IaC Compliance Check"
  standard_id      = cortexcloud_compliance_standard.custom_framework.id
  asset_group_id   = 1
  description      = "Monthly compliance assessment for IaC repositories"
  report_type      = "PDF"
  report_targets   = ["[e-mail]"]
  report_frequency = "0 12 1 * *" # First day of month at 12:00
}

For compliance schema details, refer to Compliance assessment profile schema.

For more information on Compliance, refer to Compliance for Cortex Cloud Application Security.