markofu

Ability To Justify All Selected Issues

1

When justifying issues in the UI, it would be nice to have an option (i.e. a tickbox) at the top that would automatically select all issues for a mass justification.

Add tags to side-menu

3

Security Monkey should have a separate search capability on the side-menu to search based on tags. This will require a new database table. @bunjiboys and I can look at this...

Improvement to the NGINX error message presented when API is not running.

2

As previously chatted about :: I believe it'd be nice to have an UI improvement for the API warning message within SecurityMonkey web application. I believe that this is unclear...

Flask db.session is not thread-safe (scheduled tasks)

2

After wondering about SQL Alchemeny sessions and transaction scopes, I wondered about the possibility of multiple transactions `db.Model` being run at the same time. Documentation suggest that Flask handles this...

Support IAM based RDS authentication

2

We should support using IAM based authentication for the MySQL database, to remove the need for user-data KMS encrypted db connection info.

Create a new auditor to delete untagged AMIs

Create a new auditor to delete untagged EBS snapshots

W should update the auditors to have the concept of supported account types, all collectors. Something along the lines of ```python class IAMAuditor(BaseAuditor): auditor_type = AuditorTypes.AWS_Account ``` with `auditor_type` being...

- Improve documentation - Improve workflow (e.g. auto-fill for `Required Role` within `Accounts` in the UI

Route53 DNS records placed in Private Zones will also trigger subdomain hijacking alerts even though this record is only resolvable from the VPC.