Skip to content

ACSC Essential Eight

The Australian Cyber Security Centre (ACSC) Essential Eight is a baseline cybersecurity framework designed to protect Australian organizations against cyber threats. It focuses on eight essential mitigation strategies including application control, patch applications, patch operating systems, multi-factor authentication, restrict administrative privileges, application hardening, user application hardening, and regular backups. This framework is recommended for all Australian organizations regardless of size or sector.

Terraform Registry Subdomain: acscessentialeight

module "..." {
  source  = "acscessentialeight.compliance.tf/terraform-aws-modules/<module>/aws"
  version = "<version>"
}

module "..." {
  source = "https://acscessentialeight.compliance.tf/terraform-aws-modules/<module>/aws"
}

Refer to the Terraform Registry Endpoints section for more details.

Implemented Controls

The following controls are implemented as part of this framework.

Enable/Disable Controls

You can customize the Terraform module for the desired compliance requirements by enabling/disabling individual controls.

Examples

S3 bucket module with ACSC Essential Eight compliance framework controls enabled, and a couple of controls disabled

module "..." {
  source = "https://acscessentialeight.compliance.tf/terraform-aws-modules/s3-bucket/aws?disable=apigateway_rest_api_stage_xray_tracing_enabled,apigateway_stage_logging_enabled"
}