Biggest issue I've had with open scap is Amazon Linux doesn't support it, which sucks. Keep in mind if you do a lot in AWS