├── .gitignore ├── LICENSE ├── README.md ├── all-regions.sh ├── api_gateway_enum.py ├── cognito_get_credentials.py ├── cognito_identity_pools.py ├── ec2_instance_profile_permissions.py ├── ec2_snapshots.py ├── enrich_detect_secrets.py ├── guardduty_findings.py ├── iam_access_key_owner.py ├── iam_role_trust_policies.py ├── iam_role_trust_policies_filter.py ├── iam_simulate_action.py ├── kms_grant_audit.py ├── lambda_dump.py ├── lambda_last_used.py ├── permission-bruteforce ├── README.md └── enumerate-iam.py ├── rds_snapshots.py ├── rds_snapshots_filter.py ├── regions_in_use.py ├── requirements.txt ├── route53_dump.py ├── s3_last_used.py ├── s3_versioning_cost.py ├── utils ├── __init__.py ├── boto_error_handling.py ├── get_user_name.py ├── json_encoder.py ├── json_printer.py ├── json_writer.py ├── regions.py ├── remove_metadata.py └── session.py ├── vpc_security_group_usage.py └── whoami.py /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/.gitignore -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/README.md -------------------------------------------------------------------------------- /all-regions.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/all-regions.sh -------------------------------------------------------------------------------- /api_gateway_enum.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/api_gateway_enum.py -------------------------------------------------------------------------------- /cognito_get_credentials.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/cognito_get_credentials.py -------------------------------------------------------------------------------- /cognito_identity_pools.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/cognito_identity_pools.py -------------------------------------------------------------------------------- /ec2_instance_profile_permissions.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/ec2_instance_profile_permissions.py -------------------------------------------------------------------------------- /ec2_snapshots.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/ec2_snapshots.py -------------------------------------------------------------------------------- /enrich_detect_secrets.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/enrich_detect_secrets.py -------------------------------------------------------------------------------- /guardduty_findings.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/guardduty_findings.py -------------------------------------------------------------------------------- /iam_access_key_owner.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/iam_access_key_owner.py -------------------------------------------------------------------------------- /iam_role_trust_policies.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/iam_role_trust_policies.py -------------------------------------------------------------------------------- /iam_role_trust_policies_filter.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/iam_role_trust_policies_filter.py -------------------------------------------------------------------------------- /iam_simulate_action.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/iam_simulate_action.py -------------------------------------------------------------------------------- /kms_grant_audit.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/kms_grant_audit.py -------------------------------------------------------------------------------- /lambda_dump.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/lambda_dump.py -------------------------------------------------------------------------------- /lambda_last_used.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/lambda_last_used.py -------------------------------------------------------------------------------- /permission-bruteforce/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/permission-bruteforce/README.md -------------------------------------------------------------------------------- /permission-bruteforce/enumerate-iam.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/permission-bruteforce/enumerate-iam.py -------------------------------------------------------------------------------- /rds_snapshots.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/rds_snapshots.py -------------------------------------------------------------------------------- /rds_snapshots_filter.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/rds_snapshots_filter.py -------------------------------------------------------------------------------- /regions_in_use.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/regions_in_use.py -------------------------------------------------------------------------------- /requirements.txt: -------------------------------------------------------------------------------- 1 | pygments 2 | boto3 3 | click 4 | python-dateutil 5 | tqdm -------------------------------------------------------------------------------- /route53_dump.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/route53_dump.py -------------------------------------------------------------------------------- /s3_last_used.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/s3_last_used.py -------------------------------------------------------------------------------- /s3_versioning_cost.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/s3_versioning_cost.py -------------------------------------------------------------------------------- /utils/__init__.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /utils/boto_error_handling.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/utils/boto_error_handling.py -------------------------------------------------------------------------------- /utils/get_user_name.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/utils/get_user_name.py -------------------------------------------------------------------------------- /utils/json_encoder.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/utils/json_encoder.py -------------------------------------------------------------------------------- /utils/json_printer.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/utils/json_printer.py -------------------------------------------------------------------------------- /utils/json_writer.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/utils/json_writer.py -------------------------------------------------------------------------------- /utils/regions.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/utils/regions.py -------------------------------------------------------------------------------- /utils/remove_metadata.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/utils/remove_metadata.py -------------------------------------------------------------------------------- /utils/session.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/utils/session.py -------------------------------------------------------------------------------- /vpc_security_group_usage.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/vpc_security_group_usage.py -------------------------------------------------------------------------------- /whoami.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/aws-audit-automation/HEAD/whoami.py --------------------------------------------------------------------------------