Maintaining security and compliance across complex cloud environments is a significant challenge for organizations in today’s cloud-driven era. The critical problem addressed in this paper is the challenges of manually managing compliance in cloud infrastructures. This paper introduces Compliance as Code (CAC) to automate security operations and management in the Amazon Web Services (AWS) cloud platform. CAC codifies compliance standards and regulatory frameworks such as PCI-DSS, HIPAA, ISO/IEC 27,001, and CIS Benchmarks. The research aims to implement CIS benchmark controls effectively and streamline security configurations to mitigate risks. The paper proposes a framework for automating compliance checks by integrating AWS Config and Ansible. It offers a customizable, scalable solution to monitor, detect, and remediate non-compliant resources in real-time. Custom compliance rules address organization-specific requirements, such as Identity and Access Management (IAM) policies and resource tagging. This framework implementation improves compliance rates by 30% and reduces Time to Remediate (TTR) from 45 to 5 min on average. The framework’s adaptability to various industries is demonstrated through case studies in production environments, underscoring its potential for widespread application.