feat(compliance): add FedRAMP 20x KSI Low compliance frameworks

[ethanolivertroy]

This was created to address issues with #8512 per @pedrooot

This pull request introduces support for the FedRAMP 20x Key Security Indicators (KSIs) Low Impact Level v25.05C compliance framework for AWS, Azure, and GCP. It adds new compliance data, dashboard integration, and updates documentation to reflect the expanded coverage. The main changes are grouped below.

Compliance framework support

• Added the FedRAMP-20x-KSI-Low compliance framework for AWS, including a new JSON file with detailed requirements, checks, and attributes for each KSI section.
• Implemented new dashboard modules for AWS, Azure, and GCP (fedramp_20x_ksi_low_aws.py, fedramp_20x_ksi_low_azure.py, fedramp_20x_ksi_low_gcp.py) to process and display FedRAMP KSI compliance data, including logic to shorten long requirement descriptions for better dashboard readability.

Documentation updates

• Updated the README.md to reflect the increased number of supported compliance frameworks for AWS (from 38 to 39), Azure (from 12 to 13), and GCP (from 12 to 13).*

[github-actions]

✅ Conflict Markers Resolved

All conflict markers have been successfully resolved in this pull request.

[Copilot]

Pull Request Overview

This PR adds support for the FedRAMP 20x Key Security Indicators (KSI) Low Impact Level compliance framework across AWS, Azure, and GCP providers. The implementation includes 13 KSI requirements (10 original plus 3 Phase Two additions) based on FedRAMP 20x Phase One pilot requirements.

• JSON compliance framework definitions for AWS, Azure, and GCP with provider-specific security checks
• Dashboard Python modules for displaying KSI data with description shortening logic
• Comprehensive test coverage for framework structure and dashboard functionality

Reviewed Changes

Copilot reviewed 11 out of 13 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
prowler/compliance/aws/fedramp_20x_ksi_low_aws.json	Defines FedRAMP 20x KSI Low framework for AWS with 347 lines mapping KSI requirements to AWS-specific checks
prowler/compliance/azure/fedramp_20x_ksi_low_azure.json	Defines FedRAMP 20x KSI Low framework for Azure with 358 lines mapping KSI requirements to Azure-specific checks
prowler/compliance/gcp/fedramp_20x_ksi_low_gcp.json	Defines FedRAMP 20x KSI Low framework for GCP with 293 lines mapping KSI requirements to GCP-specific checks
dashboard/compliance/fedramp_20x_ksi_low_aws.py	Dashboard module for AWS KSI framework with description shortening logic
dashboard/compliance/fedramp_20x_ksi_low_azure.py	Dashboard module for Azure KSI framework with description shortening logic
dashboard/compliance/fedramp_20x_ksi_low_gcp.py	Dashboard module for GCP KSI framework with description shortening logic
tests/lib/compliance/test_fedramp_20x_ksi_low_frameworks.py	Tests framework file existence, JSON validity, KSI requirement completeness, and version consistency
tests/dashboard/compliance/test_fedramp_20x_ksi_low_aws.py	Tests AWS dashboard functionality with various KSI requirement scenarios
tests/dashboard/compliance/test_fedramp_20x_ksi_low_azure.py	Tests Azure dashboard functionality with cloud-specific regions and requirements
tests/dashboard/compliance/test_fedramp_20x_ksi_low_gcp.py	Tests GCP dashboard functionality with GCP-specific locations and requirements
README.md	Updates compliance framework counts for AWS (38→39), Azure (12→13), and GCP (12→13)

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[pedrooot]

Thanks for this! I love it 🚀

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.07%. Comparing base (ef4e28d) to head (d62eb0d).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #9198      +/-   ##
==========================================
+ Coverage   88.72%   90.07%   +1.34%     
==========================================
  Files          93     1169    +1076     
  Lines        3539    31905   +28366     
==========================================
+ Hits         3140    28737   +25597     
- Misses        399     3168    +2769     

Flag	Coverage Δ
prowler-py3.10-aws	90.56% <ø> (?)
prowler-py3.10-azure	89.79% <ø> (?)
prowler-py3.10-gcp	90.04% <ø> (?)
prowler-py3.10-m365	?
prowler-py3.11-aws	90.53% <ø> (?)
prowler-py3.11-azure	89.76% <ø> (?)
prowler-py3.11-gcp	90.01% <ø> (?)
prowler-py3.11-m365	?
prowler-py3.12-aws	90.56% <ø> (?)
prowler-py3.12-azure	89.79% <ø> (?)
prowler-py3.12-gcp	90.03% <ø> (?)
prowler-py3.12-m365	?
prowler-py3.9-aws	90.55% <ø> (?)
prowler-py3.9-azure	89.78% <ø> (?)
prowler-py3.9-gcp	90.03% <ø> (?)
prowler-py3.9-m365	?

Flags with carried forward coverage won't be shown. Click here to find out more.

Components	Coverage Δ
prowler	90.07% <ø> (+1.34%)	⬆️
api	∅ <ø> (∅)

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.