"What is encryption? Control? Compliance? Or... an illusion?"
— Morpheus, probably auditing your AWS account
Every auditor’s first question echoes through the datacenter like an Oracle prophecy:
“Can you prove all your data is encrypted?”
If you can’t answer that with actual evidence — not screenshots, not wishful thinking — congratulations, you’re living in The Unencrypted Matrix.
Your S3 buckets are exposed like Neo before he found the coat.
This lab is your red pill. Once you take it, you’ll see the truth — the encryption keys, the KMS reality, and the JSON that sets you free.
Forget the spoon — there is encryption.
This project automates AWS encryption validation across S3 buckets and EBS volumes, assesses KMS usage, and generates reports that even the Architect (your auditor) will approve.
You’ll walk away with JSON and CSV reports mapped directly to SOC 2 and NIST requirements — evidence that doesn’t require you to say “uh, give me 3-5 business days.”
💾 Python-based Validator — checks S3, EBS, and KMS encryption settings
🧾 JSON & CSV Evidence Reports — mapped to SOC 2 CC6.1 and NIST SC-28
⚙️ Risk Classification System — High / Medium / Low, Matrix-style
💼 Portfolio Project — ready for recruiters, interviews, and the Resistance