AWS Report – Tool For Analyzing Amazon Resources

AWS Report is a tool for analyzing amazon resources, let us have a look at some of features;

  • Search iam users based on creation date
  • Search buckets public
  • Search security group with inbound rule for 0.0.0.0/0
  • Search elastic ip dissociated
  • Search volumes available
  • Search AMIs with permission public
  • Search internet gateways detached

Also Read – nmapAutomator : A Script That You Can Run In The Background

Install requirements

pip3 install –user -r requirements.txt

Environment variables

IAM_MAX_ACCESS_KEY_AGE default is 60 days.

Usage

Usage: aws_report.py [OPTIONS]

Options:
–s3 Search buckets public in s3
–iam Search iam users based on creation date
–sg Search security groups with inbound rule 0.0.0.0
–elasticip Search elastic IP not associated
–volumes Search volumes available
–ami Search AMIs with permission public
–owner TEXT Defines the owner of the resources to be found
–igw Search internet gateways detached
–region TEXT Defines the region of resources
–help Show this message and exit.

Examples

python3 aws_report.py –s3
python3 aws_report.py –iam
python3 aws_report.py –owner 296193067842 –ami

Running In Docker

docker run -it -e AWS_ACCESS_KEY_ID=you-access-key -e AWS_SECRET_ACCESS_KEY=you-secret-key gmdutra/aws-report –s3

R K

Recent Posts

Kali Linux Commands Cheat Sheet: Complete Quick Reference

This cheat sheet covers the essential Kali Linux commands every pentester and ethical hacker uses…

2 weeks ago

What I Wish I Knew Before Learning Malware Analysis and Reverse Engineering

When I first started learning malware analysis and reverse engineering, I thought the hardest part…

2 weeks ago

git fetch vs git pull: How They Work and When to Use Each

Both git fetch and git pull talk to a remote repository, but they do very different things to your…

4 weeks ago

git cherry-pick Command: Apply Commits from Another Branch

Sometimes the change you need already exists, just on the wrong branch. A hotfix lands…

4 weeks ago

Best Email APIs for Secure Business Email: Why Developers Are Moving Beyond SMTP

Email is still one of the most important communication channels inside modern applications. Password resets,…

4 weeks ago

Nginx Commands in Linux: Start, Stop, Reload, Test, and Log

Nginx is a high-performance web server and reverse proxy trusted by some of the largest…

4 weeks ago