New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Expand ScoutSuite AWS coverage #2

Open

ramimac opened this issue Oct 28, 2019 · 1 comment

Labels

Collaborator

ramimac commented Oct 28, 2019

Currently, the following findings are not supported for supported services

s3
- delete actions authorized to all principals
- get actions authorized to all principals
- list actions authorized to all principals
- manage actions authorized to all principals
- put actions authorized to all principals
- all actions authorized to all principals
- bucket world-listable
- bucket world-listable (anonymous)
- bucket world-writable
- bucket world-writable (anonymous)
- bucket permissions world-readable
- bucket permissions world-readable (anonymous)
- bucket permissions world-writable
- bucket permissions world-writable (anonymous)
iam
- managed policy findings
- root account findings
- unused role for ec2

ramimac added the enhancement label

ramimac changed the title ~~Expand ScoutSuite coverage~~ Expand ScoutSuite AWS coverage

Collaborator Author

ramimac commented Oct 28, 2019

rds
- security group findings
- snapshot is publicly accessible
redshift
- security group findings
s3
- MFA delete (currently not supported by [docs] Clarify mfa_delete cannot toggle state hashicorp/terraform-provider-aws#5953)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment