Scott Piper
Scott Piper
Indentation needs to be removed here: https://github.com/duo-labs/cloudmapper/blob/4f5ec6f6eaffdef4c8d14a628215747b548fbc2d/shared/iam_audit.py#L368 It is not reporting admins when it should
I generated a report and it showed all regions as being used, when some were not.
https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-partner-providers.html
We've had some PRs to add vendor accounts that aren't publicly documented. I've generally avoided these because: 1) The vendor might not want their account ID to be publicly known...
Add that as another bad policy, as they had updated it. https://github.com/duo-labs/cloudmapper/pull/808/files#diff-a677e8d531c79c66b32bb42a929952e558fa87d15fa70e4f9bc539fedeffa094R21
https://aws.amazon.com/blogs/aws/new-using-amazon-guardduty-to-protect-your-s3-buckets/