Changelog

a year ago

ACSC Essential Eight Rule Bundle available

The  Australian Cyber Security Centre Essential Eight Rule Bundle is now available to all organizations. This Bundle is designed to help customers fortify their AWS environment against cyber threats and strengthen their security posture.

The new Stax Compliance ACSC Essential Eight Rule Bundle includes 42 controls and 16 new rules.

Add the Bundle to Stax to get going. Once added, Stax will perform an initial evaluation and populate the Rules page with new results. You can filter the page to show only results from the Essential Eight bundle if preferred. Alternatively, to add any of the new rules to your Organization Rule Bundle, head to the Rules Catalog page.

a year ago

The Stax Terraform provider is now ready for testing

The 0.1.0 release of the Stax Terraform provider marks the completion of support for the initial set of Stax resources.

Guidance for common tasks using the Terraform provider is available on the Terraform Registry:

1. Getting Started with Permission Sets

For more information and to get started, see About the Stax Terraform Provider.

a year ago

Revised Cost & Compliance Role Permissions

Stax has released a new version of the Cost & Compliance module's service and billing roles, version 33. The following permissions have been added to the roles:

  • backup:Describe*
  • backup:Get*
  • backup:List*
  • cloudtrail:List*
  • waf-regional:Get*
  • waf-regional:List*

If your AWS accounts are Stax-managed, then you don't need to take any action. Stax will automatically update this role in the coming days.

If you're subscribed only to the Stax Cost & Compliance module, you will need to apply the update yourself.

For any questions about this change, or if you need assistance deploying the updated role, please raise a support case.

a year ago

The Stax Terraform Provider now supports Users and Group Membership

The latest v0.0.7 release of the Stax Terraform provider (Developer preview) now supports managing Users and Group Membership using Terraform. Customers can create Users, associate them with a group and then use this group with a permission set to grant access to AWS accounts, all from Terraform.

For more information and to get started, see About the Stax Terraform Provider.

a year ago

New Rule Addition to S3 Best Practice and PCI DSS Bundles

A new Rule "S3 block public bucket account setting should be enabled" has been introduced to the S3 Best Practice Version 1.1 and PCI DSS Rule Bundles.

The rule checks whether the block public access setting is enabled at the account level.

To add this rule to your Organization Rule Bundle, head to the Rules Catalog page.

a year ago

NIST Privacy Framework Rule Bundle available in private preview

The National Institute of Standards and Technology (NIST) Privacy Framework Rule Bundle is now available in private preview. This Bundle is designed to help organizations improve their privacy practices through effective risk management. To learn more about the private preview, refer to our guide.

a year ago

Revised Cost & Compliance Role Permissions

Stax has released a new version of the Cost & Compliance module's service and billing roles, version 32. The following permissions have been added to the roles:

- backup:GetBackupSelection

- backup:ListBackupPlans

- backup:ListBackupSelections

If your AWS accounts are Stax-managed, then you don't need to take any action. Stax will automatically update this role in the coming days.

If you're subscribed only to the Stax Cost & Compliance module, you will need to apply the update yourself.

For any questions about this change, or if you need assistance deploying the updated role, please raise a support case.

a year ago

The Stax Terraform Provider (Developer preview) now supports Permission Sets

The latest v0.0.5 release of the Stax Terraform provider now supports managing permission sets using Terraform. Customers can create Permission Sets, then link them to a Stax Account Type and Stax Group.

For more information and to get started, see About the Stax Terraform Provider.

a year ago

Developer preview of the Stax Terraform provider now available

The Stax Terraform provider will aid organizations using infrastructure-as-code to manage their AWS environments. The first release of this provider is now available and is released as a developer preview. It is not yet feature-complete and is not considered to be production-ready, rather exclusively for evaluation and feedback purposes.

For more information and to get started, see About the Stax Terraform Provider.

a year ago

Foundational Technical Review Rule Bundle now available for AWS Partners

The new Partner Hosted Foundational Technical Review (FTR) Rule Bundle is designed to assist organizations to prepare for the AWS Partner Hosted FTR. This bundle provides evidence to support the AWS FTR self-assessment, ensuring a smooth and streamlined compliance process. 

The Partner Hosted FTR bundle is now available to all organizations. Add the Bundle to Stax to get going. Once added, Stax will perform an initial evaluation and automatically populate the Rules page with the latest results.