How to do AWS security assesment?

1. prowler

   1 1 7,019 10.0 Shell

   Discontinued Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 240 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks. [Moved to: https://github.com/prowler-cloud/prowler] (by toniblyx)

   

   https://github.com/toniblyx/prowle (it's look like huge checklist)

2. InfluxDB

   www.influxdata.com featured

   InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.

   

3. ScoutSuite

   2 28 7,142 5.7 Python

   Multi-Cloud Security Auditing Tool

   

   https://github.com/nccgroup/ScoutSuite (I used it for GCP one time, but I can't say if it good for AWS)

4. bucketeer

   3 2 3 10.0 Python

   Bucketeer is a small script that builds off the useful Sublist3r tool. The Tool tries to identify S3 Buckets and other useful subdomain information, that is used to perform subdomain takeover attacks.

   

5. s3audit-ts

   4 1 106 0.0 TypeScript

   Discontinued CLI tool for auditing S3 buckets

   

   https://github.com/scalefactory/s3audit (it's look intersting, because I need to identify if we have open buckets)

Suggest a related project