ScoutSuite
ScoutSuite copied to clipboard
Regions filtering
AWS has multiple regions and a lot of times costumer only use one or two regions, in fact very rarely will use all regions. The reports outcome still lists every regions cluttering the reports with unnecessary information
Proposal:
- Add automatic filters that detect which regions are being used and only include their findings in the reports
Alternative:
- Other option would be to include a manual filter where it would reduce the findings to the selected regions
Keep up the good work
Hi @th3-d4v1d-c0de, there is a --regions
argument under scout aws
. Would that be the alternative solution you were looking for?
Hi @liyun-li, I am aware of that function but that limits the scan itself. The scenario would be that even if the "--region" was not selected then only regions that actually have something (some resource) would appear. This is helpful for compliance scenarios where developers are only supposed to use one region (let's say EU) and by mistake create a resource on another region (like US), without the need to filter-out default resources or false-positives. Hope this clarifies.