AWS Inspector KMS Auditor

The AWS Inspector KMS Auditor analyzes the alignment between Inspector findings and KMS usage to surface encryption posture risks for cloud environments. It ingests an Inspector run and cross-references resources with KMS key metadata to expose misconfigurations, weak policies, and risky access patterns. The tool does not render a UI; it focuses on domain logic, data relationships, and actionable outputs for security teams. Conceptually, it fetches assessment results, gathers key policy and grant data from KMS, and links findings to encryption keys. It then evaluates exposure based on policy correctness, rotation status, and principal access. This yields a prioritized remediation plan and a structured risk report suitable for further automation. Target users are security engineers, cloud admins, and IAM specialists who manage multi-account AWS deployments and must demonstrate encryption governance. Unique value lies in direct, data-driven correlation between Inspector findings and KMS configurations, enabling faster remediation and audit readiness. Core features include cross-account data handling, policy gap detection, risk scoring, and exportable outputs for SIEM or ticketing systems. Use cases include identifying resources that rely on deprecated keys, detecting overly permissive key grants, and validating that encryption at rest is consistently enforced across regions. The solution supports batch processing and can produce machine-readable reports that integrate with security workflows.