Tools/Prowler
Prowler
Open-source CIS-benchmark and best-practice auditing tool across AWS (and other clouds), generating findings for security/compliance gaps. Most-used open-source alternative to AWS_Trusted_Advisor and a common evidence-generation input for AWS_Audit_Manager and AWS_Security_Hub-style aggregation via Wazuh. Steampipe covers similar ground via SQL-queryable resource state instead of pre-built checks.