TOPS documentation

TOPS scans your AWS accounts against CIS and TOPS' own baseline, and turns what it finds into findings you can act on. This site covers evaluating, connecting, and using it.

Install and upgrade commands live in the README.md at the repository root — this site links to them rather than restating them.

This site is growing, not finished. More sections arrive as the features behind them ship. What exists so far:

Start here

• What TOPS is — and what it isn't
• How TOPS connects to AWS — for whoever has to approve TOPS before it's installed.
• Install
• Connect your first AWS account
• Run your first scan

Using TOPS

• Reading a finding — what each field means, and where to start on a long list.
• Resolving a finding — fixing, ignoring, and what the next scan does.

AWS accounts

• What the IAM role can do — the honest, policy-by-policy answer to "what does this actually grant?"

Security

• The security model
• Reporting a vulnerability