ScoutSuite
ScoutSuite copied to clipboard
(EKS) ReadOnlyAccess / SecurityAudit managed policies not enough to run "scout kubernetes -c eks"
Hi!
I'm trying to run the EKS module and I don't seem to be able to do so with the required managed policies described by the documentation
Command output:
$ python3 scout.py kubernetes -c eks --config-file /home/REDACTED/.kube/config --debug
2024-08-27 18:45:57 localhost scout[432992] INFO Launching Scout
2024-08-27 18:45:57 localhost scout[432992] INFO Authenticating to cloud provider
2024-08-27 18:46:00 localhost scout[432992] INFO GET /version
2024-08-27 19:03:28 localhost scout[432992] ERROR Failed to get /version
2024-08-27 19:03:28 localhost scout[432992] INFO GET /api
2024-08-27 19:20:57 localhost scout[432992] ERROR Failed to get /api
2024-08-27 19:20:57 localhost scout[432992] ERROR __main__.py L257: Initialization failure: 'NoneType' object is not subscriptable
My policies:
$ aws iam list-attached-user-policies --user-name REDACTED
{
"AttachedPolicies": [
{
"PolicyName": "ReadOnlyAccess",
"PolicyArn": "arn:aws:iam::aws:policy/ReadOnlyAccess"
},
{
"PolicyName": "SecurityAudit",
"PolicyArn": "arn:aws:iam::aws:policy/SecurityAudit"
},
{
"PolicyName": "IAMUserChangePassword",
"PolicyArn": "arn:aws:iam::aws:policy/IAMUserChangePassword"
}
]
}
Any idea if this is a bug, or maybe I need different managed policies?
Thank you!!