How to do AWS security assesment?

• prowler

  1 7,019 10.0 Shell

  Discontinued Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 240 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks. [Moved to: https://github.com/prowler-cloud/prowler] (by toniblyx)

  

https://github.com/toniblyx/prowle (it's look like huge checklist)

• ScoutSuite

  24 6,159 6.1 Python

  Multi-Cloud Security Auditing Tool

  

https://github.com/nccgroup/ScoutSuite (I used it for GCP one time, but I can't say if it good for AWS)

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• bucketeer

  2 3 10.0 Python

  Bucketeer is a small script that builds off the useful Sublist3r tool. The Tool tries to identify S3 Buckets and other useful subdomain information, that is used to perform subdomain takeover attacks.

• s3audit-ts

  1 106 0.0 TypeScript

  Discontinued CLI tool for auditing S3 buckets

  

https://github.com/scalefactory/s3audit (it's look intersting, because I need to identify if we have open buckets)

Suggest a related project