emfirge_check_compliance
Evaluate CIS AWS Foundations 1.5 or SOC 2 controls against a scan as one focused analysis lens.
Parameters
analysis_id: string · required; framework: cis-aws-1.5 | soc2 · optional
{
"analysis_id": "7f3c9a2e-4b1d-4c8a-9f2e-1a2b3c4d5e6f",
"framework": "cis-aws-1.5"
}
Returns
The response is JSON shaped for the operation. The fields and semantics are described below.
{
"analysis_id": "7f3c9a2e-4b1d-4c8a-9f2e-1a2b3c4d5e6f",
"frameworks": [{
"id": "cis-aws-1.5", "name": "CIS AWS Foundations", "version": "1.5", "totalControls": 28,
"passedControls": 5, "failedControls": 24, "naControls": 0,
"sections": [{ "id": "1", "title": "Identity and Access Management" }],
"controls": [{ "id": "1.2", "title": "Ensure MFA enabled for all IAM users", "section": "1", "status": "fail", "mappedRuleId": "EMFIRGE-IAM-003", "description": "Users without MFA detected" }]
}],
"fired_rule_ids": ["EMFIRGE-EC2-002", "EMFIRGE-IAM-003", "…"]
}
Validation, behavior, and limits
Omit framework to receive both CIS AWS Foundations 1.5 and SOC 2. The top level contains analysis_id, frameworks, and fired_rule_ids.
Each framework reports id, name, version, totalControls, passedControls, failedControls, naControls, sections, and controls. Each control includes id, title, section, status, mappedRuleId, and description. Control mapping is based on rule-ID presence. Unmapped controls (including SOC2 controls with no matching rule) are assumed pass, so this is not a full audit; fired_rule_ids lists triggered rules.
CIS AWS Foundations 1.5 has 28 controls and SOC 2 has 12. Each finding carries MITRE ATT&CK mapping. Results are read-only and do not constitute certification or a full audit; mapping is based on rule-ID presence, and unmapped controls are assumed pass.