| ScoutSuite | - Multi-cloud security auditing tool
- Permissions:
SecurityAudit - Usage:
$ python Scout.py --provider aws
|
| Prowler | - CIS benchmarks and additional checks for security best practices in AWS
- Permissions:
SecurityAudit - Usage:
$ ./prowler -M html
|
| CS-Suite | - Auditing the security posture of AWS/GCP/Azure infrastructure
- Permissions:
SecurityAudit - Usage:
$ python cs.py -env aws
|
| CloudSploit | - Security scanning checks
- Permissions:
SecurityAudit - Usage:
// Edit the index.js file with your AWS key and secret// Run a standard scan
$ node index.js// Run a compliance scan
$ node index.js --compliance=hipaa
|
| Cloudsplaining | - Scans accounts for violations of Least Privilege and identifies policies that can lead to Privilege Escalation, Data Exfiltration, Resource Exposure, and Infrastructure Modification
|
| cloudlist | - Obtain public assets (hostnames, IPs)
|