AWS Security Hub and Config Controls

[xee5ch]

As a more applicable alternative to #8, a catalog of controls for AWS Config and Security Hub integration specific to AWS, related back to other common control frameworks.

https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-controls-reference.html

There is a RSS feed for updates, but no structured, machine-readable format for all content as-is to convert into OSCAL catalogs except HTML. It will be necessary to build a parser for each page and a wrapper crawler to look at the index of service controls and recursively process the OSCAL catalogs.

[xee5ch]

I made initial progress today after testing and abandoning scrapy. I have figured out just enough of XPath to filter control data. I am just wrapping up the glue code from the site spidering to the transform functions to generate OSCAL catalogs and profiles

More to follow.