How to do AWS security assesment?

• prowler

  1 7,019 10.0 Shell

  Discontinued Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 240 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks. [Moved to: https://github.com/prowler-cloud/prowler] (by toniblyx)

  

https://github.com/toniblyx/prowle (it's look like huge checklist)

• ScoutSuite

  24 6,262 7.5 Python

  Multi-Cloud Security Auditing Tool

  

https://github.com/nccgroup/ScoutSuite (I used it for GCP one time, but I can't say if it good for AWS)

• Scout Monitoring

  www.scoutapm.com featured

  Free Django app performance insights with Scout Monitoring. Get Scout setup in minutes, and let us sweat the small stuff. A couple lines in settings.py is all you need to start monitoring your apps. Sign up for our free tier today.

  

• bucketeer

  2 3 10.0 Python

  Bucketeer is a small script that builds off the useful Sublist3r tool. The Tool tries to identify S3 Buckets and other useful subdomain information, that is used to perform subdomain takeover attacks.

• s3audit-ts

  1 106 0.0 TypeScript

  Discontinued CLI tool for auditing S3 buckets

  

https://github.com/scalefactory/s3audit (it's look intersting, because I need to identify if we have open buckets)

Suggest a related project