[Verse 1]
When compliance calls your name tonight
Manual checks just aren't quite right
There's a world of tools to make it flow
Automation resources you should know
DISA gives you SCAP content free
Official benchmarks, scripts with guarantee
Hardening guides that never sleep
Making security promises you can keep
[Chorus]
Two paths to choose, two ways to go
Automation makes your systems glow
Official sources, community strength
Going the distance, going the length
SCAP and Ansible, side by side
Let automation be your guide
Two resources, tried and true
Making STIG compliance work for you
[Verse 2]
Ansible STIG roles take the stage
Community playbooks, page by page
Lockdown scripts that run so clean
Best automation you've ever seen
Chef InSpec profiles test your way
Compliance as code, day by day
Validation running through the night
Making sure your configs shine so bright
[Chorus]
Two paths to choose, two ways to go
Automation makes your systems glow
Official sources, community strength
Going the distance, going the length
SCAP and Ansible, side by side
Let automation be your guide
Two resources, tried and true
Making STIG compliance work for you
[Bridge]
CIS benchmarks align so well
Security stories they help tell
SSG open source and free
Cross-platform security
AWS Config in the cloud
Azure Policy standing proud
Native controls that understand
STIG requirements across the land
[Chorus]
Two paths to choose, two ways to go
Automation makes your systems glow
Official sources, community strength
Going the distance, going the length
SCAP and Ansible, side by side
Let automation be your guide
Two resources, tried and true
Making STIG compliance work for you
[Outro]
Don't go manual when you can automate
Two resource types seal your fate
Official DISA, community care
STIG automation everywhere