calethia 0.2.0

Calethia SDK for writing compliance policies as code

Calethia SDK

Python SDK for writing compliance policies as code.

Installation

pip install calethia

Quick Start

from calethia import policy, Severity
from calethia.aws import iam
from calethia.frameworks import SOC2, CIS_AWS

@policy(
    id="aws.iam.mfa_required",
    name="IAM Users Have MFA",
    severity=Severity.HIGH,
    frameworks=[SOC2("CC6.1"), CIS_AWS("1.10")],
)
def check_mfa(ctx: iam.Context) -> iam.Result:
    """Ensure all IAM users with console access have MFA enabled."""
    users = ctx.list_users()

    for user in users:
        if user.has_console_access and not user.mfa_enabled:
            ctx.fail(user.to_resource(), "User has console access but no MFA")
        else:
            ctx.pass_(user.to_resource())

    return ctx.result()

Features

• Decorator-based policy definition
• Type-safe framework control mappings
• AWS context with managed boto3 clients
• Full IDE autocomplete support