ScoutSuite icon indicating copy to clipboard operation
ScoutSuite copied to clipboard

(EKS) ReadOnlyAccess / SecurityAudit managed policies not enough to run "scout kubernetes -c eks"

Open lean0x2F opened this issue 6 months ago • 0 comments

Hi!

I'm trying to run the EKS module and I don't seem to be able to do so with the required managed policies described by the documentation

Command output:

$ python3 scout.py kubernetes -c eks --config-file /home/REDACTED/.kube/config --debug
2024-08-27 18:45:57 localhost scout[432992] INFO Launching Scout
2024-08-27 18:45:57 localhost scout[432992] INFO Authenticating to cloud provider
2024-08-27 18:46:00 localhost scout[432992] INFO GET /version
2024-08-27 19:03:28 localhost scout[432992] ERROR Failed to get /version
2024-08-27 19:03:28 localhost scout[432992] INFO GET /api
2024-08-27 19:20:57 localhost scout[432992] ERROR Failed to get /api
2024-08-27 19:20:57 localhost scout[432992] ERROR __main__.py L257: Initialization failure: 'NoneType' object is not subscriptable

My policies:

$ aws iam list-attached-user-policies --user-name REDACTED
{
    "AttachedPolicies": [
        {
            "PolicyName": "ReadOnlyAccess",
            "PolicyArn": "arn:aws:iam::aws:policy/ReadOnlyAccess"
        },
        {
            "PolicyName": "SecurityAudit",
            "PolicyArn": "arn:aws:iam::aws:policy/SecurityAudit"
        },
        {
            "PolicyName": "IAMUserChangePassword",
            "PolicyArn": "arn:aws:iam::aws:policy/IAMUserChangePassword"
        }
    ]
}

Any idea if this is a bug, or maybe I need different managed policies?

Thank you!!

lean0x2F avatar Aug 27 '24 19:08 lean0x2F