ScoutSuite
ScoutSuite copied to clipboard
Added Feature/AWS Container Services (ECR,EKS,ECS)
Description
This pull request introduces support for key AWS container services—ECR (Elastic Container Registry), EKS (Elastic Kubernetes Service), and ECS (Elastic Container Service) within ScoutSuite. The changes extend the tool's capabilities to comprehensively assess the security posture of AWS environments utilizing container services.
New Features:
AWS Container Service Support: Integration for ECR, EKS, and ECS services has been implemented, allowing ScoutSuite to analyze and report on the security configuration of these AWS container services.
Sample Rules: To jumpstart the assessment process, several sample rules have been incorporated to evaluate the vulnerability and compliance status of the AWS container services. These rules cover key security considerations in line with best practices.
HTML Report Validation: The HTML reports generated by the modified code have been reviewed to confirm that they accurately represent the security posture of AWS container services.
Issue Resolution: This pull request addresses the concerns raised in GitHub issue #1491, providing the requested support for AWS container services and delivering a comprehensive solution for security assessment within these environments.
Dependencies: The dependencies have been carefully managed to ensure compatibility and support for the AWS container services. No breaking changes or conflicts with existing dependencies have been introduced. Your feedback on the introduced features, code changes, and the overall impact on ScoutSuite's capabilities in AWS environments is highly appreciated. Feel free to reach out with any questions or concerns.
Type of change
Select the relevant option(s):
- [ ] Bug fix (non-breaking change which fixes an issue)
- [x] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
- [ ] This change requires a documentation update
Checklist:
- [x] My code follows the style guidelines of this project
- [x] I have performed a self-review of my own code
- [x] I have commented my code, particularly in hard-to-understand areas
- [x] My changes generate no new warnings
- [ ] I have added tests that prove my fix is effective or that my feature works (optional)
- [x] New and existing unit tests pass locally with my changes