Compliance lifecycle management for cloud-based resources

A method, comprising:

• receiving a selection of a compliance pack from a plurality of compliance packs, wherein the compliance pack comprises a plurality of rules associated with policy compliance, wherein the compliance pack is selected from the plurality of compliance packs, and wherein the selection is associated with one or more resources hosted in one or more provider networks, and wherein the one or more resources use or access data that are subject to one or more compliance rules;
• performing an evaluation of compliance of the one or more resources with respect to the plurality of rules of the compliance pack;
• and
• generating and displaying data describing the evaluation, wherein the data describing the evaluation comprises an aggregate compliance status for at least one of the one or more resources, wherein the aggregate compliance status represents an aggregate compliance with the plurality of rules.

One or more non-transitory computer-readable storage media storing program instructions that, when executed on or across one or more processors, perform:

• receiving a selection of a compliance pack from a plurality of compliance packs, wherein the compliance pack comprises a plurality of rules associated with policy compliance and one or more remedial actions, wherein the compliance pack is selected from the plurality of compliance packs via a user interface, wherein the selection is associated with one or more resources hosted in one or more cloud-based provider networks, and wherein the one or more resources use or access data that are subject to one or more compliance rules;
• performing an evaluation of compliance of the one or more resources with respect to the plurality of rules of the compliance pack;
• generating and displaying data describing the evaluation, wherein the data describing the evaluation comprises an aggregate compliance status for at least one of the one or more resources, wherein the aggregate compliance status represents an aggregate compliance with the plurality of rules;
• determining, based at least in part on the evaluation, that at least one of the resources fails to comply with one or more of the rules;
• and
• performing one or more automated remedial actions described in the compliance pack, wherein the one or more automated remedial actions place the at least one of the resources in compliance with the plurality of rules of the compliance pack.