Is there any way to efficiently audit security groups?

• prowler

  24 9,547 9.8 Python

  Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

  

Prowler does a pretty good audit of the security groups (as well as the whole account).

• ScoutSuite

  24 6,159 6.1 Python

  Multi-Cloud Security Auditing Tool

  

ScoutSuite is similar to prowler (runs faster though) but last time I used it it had less checks.

• SurveyJS

  surveyjs.io sponsored

  Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

  

• cloudmapper

  8 5,830 3.6 JavaScript

  CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

  

You can use CloudMapper for some visualizations and CMDB but the diagram is kinda difficult and you have to put some effort into it.

Suggest a related project