> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nofire.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Infrastructure Compliance

> Review your cloud resources against security best practices and surface gaps before audits do.

Cloud environments grow complex. NOFire reviews your resources against security best practices and surfaces gaps before auditors do.

<CardGroup cols={2}>
  <Card title="Security group review" icon="shield-check">
    Open ports, overly permissive ingress rules, resources exposed to 0.0.0.0/0.
  </Card>

  <Card title="Encryption status" icon="lock">
    S3 buckets, EBS volumes, and RDS instances without encryption at rest.
  </Card>

  <Card title="IAM best practices" icon="user-shield">
    Overly broad IAM policies, unused access keys, missing MFA.
  </Card>

  <Card title="CIS benchmark alignment" icon="clipboard-check">
    Check against CIS AWS Foundations Benchmark for common compliance gaps.
  </Card>
</CardGroup>

### How to use it

```
@NOFire AI are there any security groups with 0.0.0.0/0 ingress?
```

```
@NOFire AI which S3 buckets don't have encryption enabled?
```

```
@NOFire AI run a compliance check against CIS benchmarks for our AWS account
```

```
@NOFire AI find IAM users with unused access keys older than 90 days
```

***

## Common Scenarios

<AccordionGroup>
  <Accordion title="Pre-audit compliance check">
    ```
    @NOFire AI run a compliance review — what gaps would an auditor find?
    ```
  </Accordion>

  <Accordion title="Security group drift">
    ```
    @NOFire AI have any security groups been modified in the last 7 days?
    ```
  </Accordion>

  <Accordion title="Encryption coverage">
    ```
    @NOFire AI give me a summary of encryption status across all S3, EBS, and RDS resources
    ```
  </Accordion>
</AccordionGroup>

## Available in

* **Slack**: `@NOFire AI` in any channel
* **Chat dashboard**: [my.nofire.ai](https://my.nofire.ai)
* **IDE (MCP)**: quick compliance checks while coding

## Getting Started

<Steps>
  <Step title="Connect AWS">
    Requires read-only IAM access. [Connect AWS →](/providers/aws)
  </Step>

  <Step title="Ask your first question">
    Start broad: `@NOFire AI run a compliance review — what gaps would an auditor find?`
  </Step>
</Steps>