Automated API framework tools for evaluating cloud resources (IAM, S3, KMS) for compliance with ISO 27001 case study AWS

Trudy-Ann Campbell; Samson Eromonsei; Olusegun Afolabi

doi:10.30574/gjeta.2024.20.1.0126

Research & review articles are invited for publication in September 2026 (Vol. 28, Issue 3) || Submission: up to 28^th September || Editorial decision: within 48 hrs.

Automated API framework tools for evaluating cloud resources (IAM, S3, KMS) for compliance with ISO 27001 case study AWS

Trudy-Ann Campbell ^{1, *}, Samson Eromonsei ¹ and Olusegun Afolabi ²

1 School of Engineering Prairie View A&M University Prairie View, Texas USA.

2 Department of Information Systems and Business Analysis, Aston Business School, Aston University, Birmingham, UK.

Research Article

Global Journal of Engineering and Technology Advances, 2024, 20(01), 131–149.

Article DOI: 10.30574/gjeta.2024.20.1.0126

DOI url: https://doi.org/10.30574/gjeta.2024.20.1.0126

Publication history

Received on 09 June 2024; revised on 17 July 2024; accepted on 20 July 2024

Abstract

CLOUD— computing's advancements has provided scalability and adaptability but has also given rise to data security concerns. ISO 27001 is vital for cloud information security, yet compliance in dynamic settings poses challenges. Automated API framework tools automate ISO 27001 compliance checks for IAM, S3, and KMS services in AWS, boosting efficiency and minimizing errors. This study investigates the effectiveness of these frameworks, focusing on AWS environments. It explores advantages, difficulties, and practical considerations of automation in cloud compliance. Insights aim to enhance understanding of how automation reinforces security and regulatory adherence. Previous studies highlight the need for adaptable monitoring solutions in cloud setups. Recent research demonstrates the potential of programming languages like Python to streamline compliance processes effectively. This study contributes by examining the efficiency of automated compliance frameworks in AWS, offering perspectives on their practical application in cloud settings.

Keywords

Cloud Computing; ISO 27001 Compliance; Automated Compliance Frameworks; AWS Services (IAM; S3; KMS); Security Management Systems; Regulatory Compliance; Data Security; Automation in Cloud Computing; Information Security; Cloud Security

Download Article PDF

https://gjeta.com/sites/default/files/fulltext_pdf/GJETA-2024-0126.pdf

Preview Article PDF

How to cite this article

Trudy-Ann Campbell, Samson Eromonsei and Olusegun Afolabi. Automated API framework tools for evaluating cloud resources (IAM, S3, KMS) for compliance with ISO 27001 case study AWS. Global Journal of Engineering and Technology Advances, 2024, 20(1), 131-149. Article DOI: https://doi.org/10.30574/gjeta.2024.20.1.0126

Copyright © Author(s). All rights reserved. This article is published under the terms of the Creative Commons Attribution 4.0 International License (CC BY 4.0), which permits use, sharing, adaptation, distribution, and reproduction in any medium or format, as long as appropriate credit is given to the original author(s) and source, a link to the license is provided, and any changes made are indicated.

All statements, opinions, and data contained in this publication are solely those of the individual author(s) and contributor(s). The journal, editors, reviewers, and publisher disclaim any responsibility or liability for the content, including accuracy, completeness, or any consequences arising from its use.