This repository maintains some of the scripts made by Ebryx DevSecOps team ¯\(ツ)/¯

• Credentials Report (from here)
• Python (2.7.*)
• Python pip
• Python module awscli
• Python module pygments

pip install -r requirements.txt

• Kali linux (subsystem)
• Ubuntu (subsystem)

You can download the latest version by cloning this GitHub repository.

git clone https://github.com/Ebryx/Scouter

• Please run aws configure before running the scripts
• Each script is labelled with check name and needs to be executed manually
• Place credentials report as creds.csv in the same directory of script while performing IAM checks

• Orphan Users
• Users with both Console && CLI access
• Users without any IAM Group

• ServerSide Encryption
• MFA deletion protection

• Outdated AMIs
• Unused KeyPairs
• Unused EIPs
• Instances without termination protection
• Instances with(out) Detailed Monitoring Enabled
• Instances with(out) tags

• VPCs with(out) Flow Logs

• Instances publicly exposed

• Clusters publicly exposed

• Stack Termination Protection

• Trail buckets without MFA Deletion Protection
• Trail buckets without Access Logging Enabled

• ElasticBeanStalk Outdated Custom AMIs

• Disabled KMS Keys
• Exposed KMS Keys

• Topics with HTTP protcol
• Publicly Exposed Topics

• Lambda Artifacts Collector

• Scripts will only run against resources specified by the region in `aws configure` (~/.aws/config)
• For Dependencies Issues -> Solution