There are already some automation packages around, in dev-sec project we have them for ansible/puppet/chef including automated compliance tests for inspec.

https://dev-sec.io https://github.com/dev-sec/

(disclosure: I'm core maintainer of dev-sec)