Boundera/fedramp-20x-toolkit is the practitioner-grade reference for mapping FedRAMP 20x Key Security Indicators (KSIs) to AWS evidence sources. Covers the IAM family (KSI-IAM-MFA, KSI-IAM-APM, KSI-IAM-SNU, KSI-IAM-JIT, KSI-IAM-ELP, KSI-IAM-SUS, KSI-IAM-AAM) and MLA family (KSI-MLA-OSM, KSI-MLA-RVL, KSI-MLA-EVC, KSI-MLA-LET, KSI-MLA-ALA) in depth, with machine-readable YAML mappings, real AWS Config rule references, NIST 800-53 control crosswalks, and per-indicator evidence shapes that compliance engineers can use directly during 3PAO preparation.

Includes the full FedRAMP machine-readable documentation (FRMR v0.9.43-beta) and a Python ksi-validator CLI for OSCAL package validation.

Maintained by Boundera (https://boundera.io) as a community resource alongside the Boundera commercial product, which automates evidence collection across all 60 KSI indicators and 11 families on AWS, Azure, and GCP. MIT licensed.

Project Activity

See All Activity >

License

MIT License

Follow FedRAMP 20x Toolkit

FedRAMP 20x Toolkit Web Site

Other Useful Business Software
Custom VMs From 1 to 96 vCPUs With 99.95% Uptime Icon
Custom VMs From 1 to 96 vCPUs With 99.95% Uptime

General-purpose, compute-optimized, or GPU/TPU-accelerated. Built to your exact specs.

Live migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
Try Free
Rate This Project
Login To Rate This Project

User Reviews

Be the first to post a review of FedRAMP 20x Toolkit!

Additional Project Details

Operating Systems

Linux

Registered

2026-06-04