A compliance baseline is the minimum set of required security controls, configuration checks, or policy rules that cloud resources must meet to be considered acceptable. It turns a broad standard, such as an internal policy or regulatory framework, into concrete checks for settings like logging, encryption, identity permissions, network exposure, and alerting.
In cyber security, baselines matter because they provide a repeatable way to measure drift: when a cloud account, subscription, or workload deviates from the approved standard, defenders can spot misconfigurations before attackers exploit them. Attackers often benefit from weak baselines, such as public storage, overly broad roles, or disabled audit logs. Defenders use baselines in CSPM tools, native cloud security services, and audit scripts to find gaps quickly, prioritize remediation, and prove that controls are in place.