├── CODE_OF_CONDUCT.md ├── CONTRIBUTING.md ├── LICENSE ├── README.md ├── images ├── data-protection-insights-architecture.png └── header.png ├── kms-analytics-stack └── kms-insights-analytics-template.yml ├── kms-data-collector-stack ├── kms-insights-data-template.yml ├── lambda │ ├── generate-kms-insights │ │ ├── config.py │ │ ├── generate-kms-insights.py │ │ └── helper │ │ │ ├── aws_cloud_trail_client.py │ │ │ ├── aws_key_policy_analyzer.py │ │ │ ├── aws_key_policy_extractor.py │ │ │ ├── aws_kms_client.py │ │ │ ├── aws_s3_client.py │ │ │ ├── aws_service_client.py │ │ │ └── logger.py │ └── list-accounts │ │ └── list-accounts.py └── statemachine │ └── kms-insights-state-machine.json ├── member-account-kmsread-role.yaml ├── member-stack-set └── member-account-kmsread-role.yaml └── template.yml /CODE_OF_CONDUCT.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/CODE_OF_CONDUCT.md -------------------------------------------------------------------------------- /CONTRIBUTING.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/CONTRIBUTING.md -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/README.md -------------------------------------------------------------------------------- /images/data-protection-insights-architecture.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/images/data-protection-insights-architecture.png -------------------------------------------------------------------------------- /images/header.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/images/header.png -------------------------------------------------------------------------------- /kms-analytics-stack/kms-insights-analytics-template.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/kms-analytics-stack/kms-insights-analytics-template.yml -------------------------------------------------------------------------------- /kms-data-collector-stack/kms-insights-data-template.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/kms-data-collector-stack/kms-insights-data-template.yml -------------------------------------------------------------------------------- /kms-data-collector-stack/lambda/generate-kms-insights/config.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/kms-data-collector-stack/lambda/generate-kms-insights/config.py -------------------------------------------------------------------------------- /kms-data-collector-stack/lambda/generate-kms-insights/generate-kms-insights.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/kms-data-collector-stack/lambda/generate-kms-insights/generate-kms-insights.py -------------------------------------------------------------------------------- /kms-data-collector-stack/lambda/generate-kms-insights/helper/aws_cloud_trail_client.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/kms-data-collector-stack/lambda/generate-kms-insights/helper/aws_cloud_trail_client.py -------------------------------------------------------------------------------- /kms-data-collector-stack/lambda/generate-kms-insights/helper/aws_key_policy_analyzer.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/kms-data-collector-stack/lambda/generate-kms-insights/helper/aws_key_policy_analyzer.py -------------------------------------------------------------------------------- /kms-data-collector-stack/lambda/generate-kms-insights/helper/aws_key_policy_extractor.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/kms-data-collector-stack/lambda/generate-kms-insights/helper/aws_key_policy_extractor.py -------------------------------------------------------------------------------- /kms-data-collector-stack/lambda/generate-kms-insights/helper/aws_kms_client.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/kms-data-collector-stack/lambda/generate-kms-insights/helper/aws_kms_client.py -------------------------------------------------------------------------------- /kms-data-collector-stack/lambda/generate-kms-insights/helper/aws_s3_client.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/kms-data-collector-stack/lambda/generate-kms-insights/helper/aws_s3_client.py -------------------------------------------------------------------------------- /kms-data-collector-stack/lambda/generate-kms-insights/helper/aws_service_client.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/kms-data-collector-stack/lambda/generate-kms-insights/helper/aws_service_client.py -------------------------------------------------------------------------------- /kms-data-collector-stack/lambda/generate-kms-insights/helper/logger.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/kms-data-collector-stack/lambda/generate-kms-insights/helper/logger.py -------------------------------------------------------------------------------- /kms-data-collector-stack/lambda/list-accounts/list-accounts.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/kms-data-collector-stack/lambda/list-accounts/list-accounts.py -------------------------------------------------------------------------------- /kms-data-collector-stack/statemachine/kms-insights-state-machine.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/kms-data-collector-stack/statemachine/kms-insights-state-machine.json -------------------------------------------------------------------------------- /member-account-kmsread-role.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/member-account-kmsread-role.yaml -------------------------------------------------------------------------------- /member-stack-set/member-account-kmsread-role.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/member-stack-set/member-account-kmsread-role.yaml -------------------------------------------------------------------------------- /template.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/tracking-aws-kms-key-policies-using-amazon-quicksight/HEAD/template.yml --------------------------------------------------------------------------------