C3M Cloud Control
Overview
C3M Cloud Control Application gives enterprises the ability to leverage most of the Cloud Control features from within their Splunk subscriptions. The Cloud Control Application comes with a set of pre-defined dashboards that help SOC, Compliance, and IAM teams analyze, report, and respond to cloud security incidents in their Splunk instance. Link-backs are given to C3M Cloud Control for use cases that may not fall under the purview of this integration.
Release Notes
Version 1.3.0
- Included the support to show the violating policy description, recommendation, and reference.
- Fixed issues with compliance center page
Version 1.1.0
- Modifications to the Compliance Summary Dashboard to show appropriate Legends.
Version 1.0.0
C3M Cloud Control Version 1.0.0 covers the following dashboards and screens.
Policy Summary
The Policy Summary dashboard provides a security posture of your cloud accounts across multiple cloud providers. You can drill down to a specific cloud provider like AWS, GCP, Azure, or to a particular cloud account to check the security posture.
Info: A policy in C3M is a security best practice defined for the supported resource type.
Compliance Summary
The Compliance Summary dashboard shows the compliance of your cloud account's security configurations to various standards like NIST, ISO, HIPAA, CIS, GLBA, GDRP, FedRAMP, etc.
Policy Center
The Policy Center screen shows the actual evaluation of policies with passed and failed resources. You can use the top-level filters to narrow down the assessments based on the cloud provider, cloud account, severity, compliance status, security standard controls, and resource type. And you can also click on any violating policy and check the violating resources.
Compliance Center
The Compliance Center screen shows the evaluation details of various security standards and their passed and failed controls. You can use the top-level filters to narrow down the assessments based on the cloud provider, cloud account, standard name, and control ids. And also, for each standard, on mouse-over, you can see the passed and failed controls.
Inventory Summary
Inventory Summary dashboard gives an overview and compliance of all the discovered assets across multiple cloud providers and cloud accounts. You can use the top-level filters to narrow down the asset details based on the cloud provider & cloud account. It also provides a geographical representation of the discovered resources and their compliance.