AirIAM VS PMapper

ugh access + least privilege on AWS + GCP is really hard

not made easier by the fact that debugging service accounts can sometimes require rebooting boxes or clusters

'cloud traceroute' to discover where exactly the problem is would be amazing

(in fairness there are 'least privilege' tools I haven't tried -- listed below and I recall reading about others)

1. iam access analyzer https://aws.amazon.com/blogs/security/iam-access-analyzer-ma...

2. airiam https://github.com/bridgecrewio/AirIAM

3. policy simulator https://cloud.google.com/policy-intelligence/docs/iam-simula...

View on GitHub

In addition to ScoutSuite, I recommend PMapper. https://github.com/nccgroup/PMapper

There are tons of other escape hatches, so it's a pretty big moving target. If you'd like to get a hint about your setup, I'd suggest trying: https://github.com/nccgroup/PMapper

I maintain an open-source project [1] that uses graphs to model data. I wanted to make my project as accessible as possible, so Graphviz was perfect since it's dead-simple to install and use on all major OS platforms.

[1] https://github.com/nccgroup/PMapper

Hi HN!

Principal Mapper is a tool + library for analyzing and securing your AWS IAM configuration. It generates a model of your account and/or organization and uses it to give you a better idea of the effective permissions of your IAM Users and Roles. It has privilege escalation detection built-in and is hopefully written in a way that will let you extend it for your use-cases.

This v1.1.0 update covers more types of policies (resource policies, permission boundaries, session policies, SCPs), supports AWS Organizations, enables cross-account checks, and more!

https://github.com/nccgroup/PMapper

Happy to answer any questions you have here!