Comments (5)
Glad to hear that. Sure, sign me up for testing! I have a small personal org to try things in.
In the meantime, I may experiment with a script that generates the profiles for the member accounts and drives aws_recon to run on each one.
I believe the API thottling limits are per account, so it may be possible to run a few aws_recon processes in parallel in this way.
If I get any useful results I'll share them here.
from aws-recon.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
from aws-recon.
Hi @iainelder, I think it's a great idea. I can't promise a timeline, but it would make for a great feature enhancement. Would you be available to help test it?
from aws-recon.
I wrote some experimental code that can drive aws_recon as I described.
Once you have a CLI config file with one profile for each account in your organization, it's quite straightforward to execute aws_recon once with each profile. You can use something like GNU Parallel to make it go faster.
Example here in bash:
Writing such a profile file is more complicated than I had first thought. You need to treat the management account separately and copy the existing config for it.
Example here in Python:
https://github.com/iainelder/parallel_recon/blob/c1a72da8daf0867577232ac11e6db7e8b6023ac0/main.py
The code for reading and writing the existing profiles depends on some internal methods of Python's awscli and botocore packages to do that. I'm less familiar with the Ruby SDK for AWS, but the same would be possible one way or another.
from aws-recon.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
from aws-recon.
Related Issues (20)
- [s3] bucket_logging not captured HOT 1
- [s3] get_object_lock_configuration
- [terraform] optional external ID HOT 2
- [IAM] strip old policy documents HOT 2
- [ecr] collect image scan findings HOT 4
- ARN isn't valid | WAFV2 HOT 7
- Skip errors HOT 5
- [ec2] Invalid action DescribeManagedPrefixList HOT 3
- error describing resources with SCP explicit deny HOT 3
- Handle AccessDeniedException error in applicationautoscaling.rb HOT 3
- leverage AWS Cloud Control API HOT 3
- Aws::S3::Errors::MethodNotAllowed in aws-sdk-core HOT 4
- Service inclusion/exclusion should be case insensitive HOT 3
- Only finds ECS clusters named "default" HOT 1
- [EC2] record a synthetic ARN for the AWS account HOT 1
- [EC2] describe_iam_instance_profile_associations HOT 1
- [IAM] list_instance_profiles
- [ECR] describe_image_scan_findings HOT 1
- [Inspector] list_findings, describe_findings HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aws-recon.