KMS Inspector Audit

Analyzes AWS KMS key configurations, rotation status, policies, alias hygiene, and cross-account access. It ingests data from AWS KMS and Inspector findings to surface misconfigurations, exposure risks, and policy weaknesses across accounts. The tool outputs a deterministic risk score and a comprehensive key-level view, enabling security engineers, cloud admins, and compliance teams to assess posture without performing remediation through the tool itself. This approach supports ongoing governance and audit readiness in multi-account environments.
Conceptually, data is collected, normalized, and scored using a weighted model that emphasizes rotation, policy alignment, access controls, and Inspector correlations. The core outputs are overall risk score (0-100), per-key metrics, and recommended mitigations. It supports multi-region inventories, exportable reports, and integration-ready JSON. Use cases include pre-audit readiness, quarterly risk reviews, and governance programs in AWS-centric environments.
Unique value lies in mapping KMS configurations to Inspector findings and governance requirements, enabling faster remediation prioritization and audit traceability. By providing exportable reports and clear scoring, teams can demonstrate control maturity and reduce audit effort while maintaining cloud security posture.