MeiyamRegister interest
LiveCloud infrastructure

AWS compliance checks for SOC 2 and ISO 27001

Check your AWS accounts against SOC 2 and ISO 27001 controls: encryption, public exposure, identity hygiene and audit logging.

Register interestAll integrationsFree trial opens at launch
AWS access cannot change or delete anything, because every API outside the read allowlist is denied.

What it collects

  • S3 bucketsencryption, public-access blocks, versioning
  • IAMroot MFA, password policy, user and role posture
  • EC2, EBS and VPCencryption and network exposure
  • RDS and KMSencryption at rest
  • CloudTrail and AWS Configaudit-trail coverage
  • Lambdafunction configuration

25 automated rules check this evidence. Every finding shows the captured configuration of its resource and the full history of what happened to it.

Controls it feeds

SOC 2 criteria

  • CC6.1
  • CC6.6
  • CC7.1
  • CC7.2

ISO 27001 Annex A controls

  • A.5.17
  • A.5.33
  • A.8.3
  • A.8.5
  • A.8.9
  • A.8.15
  • A.8.20
  • A.8.22
  • A.8.24

The SOC 2 page and the ISO 27001 page show where they sit in each framework.

How it connects

Meiyam assumes a cross-account IAM role in your AWS account, with an external ID unique to the connection. An AWS CloudFormation template creates it, and you can read the template before you launch it. Meiyam reads configuration from Amazon Simple Storage Service (Amazon S3), AWS Identity and Access Management (IAM), Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Block Store (Amazon EBS), Amazon Virtual Private Cloud (Amazon VPC), Amazon Relational Database Service (Amazon RDS), AWS Key Management Service (AWS KMS), AWS CloudTrail, AWS Config and AWS Lambda. It cannot change or delete anything, because every API outside the read allowlist is denied.

Connecting it

  1. Launch the CloudFormation template

  2. Confirm the role

  3. Choose your regions

  4. Run the first scan

AWS is a trademark of Amazon.com, Inc. or its affiliates. Meiyam integrates with AWS through its published APIs; Meiyam is not affiliated with, sponsored by or endorsed by Amazon.com, Inc. or its affiliates. Trademark notices

Meiyam integrates with AWS

Register interest and we will tell you when Meiyam opens.

Register interestAll integrations