Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Additional analyzers #3

Open
AlexsJones opened this issue Nov 3, 2023 · 0 comments
Open

feat: Additional analyzers #3

AlexsJones opened this issue Nov 3, 2023 · 0 comments

Comments

@AlexsJones
Copy link
Contributor

IAM Policy Analyzer:

Analyze IAM policies to check for overly permissive policies.
Detect unused or idle IAM users, roles, or permissions.
EC2 Instance Analyzer:

Check for EC2 instances with public IP addresses.
Identify underutilized instances (e.g., low CPU utilization).
Lambda Function Analyzer:

Analyze Lambda functions for excessive memory or execution time configurations.
Detect Lambda functions that are triggered but not in use.
VPC and Subnet Analyzer:

Identify VPCs and subnets with misconfigured routing tables.
Check for subnets with public IP auto-assignment.
Elastic Load Balancer (ELB) Analyzer:

Check for ELBs with misconfigured security groups.
Identify unused or underutilized ELBs.
CloudTrail Log Analyzer:

Analyze CloudTrail logs for suspicious or unauthorized API activity.
Detect changes in CloudTrail configuration or logging status.
Route 53 Analyzer:

Check for Route 53 hosted zones with public access.
Identify DNS records with incorrect configurations.
SNS and SQS Analyzer:

Analyze SNS topics and SQS queues for open access.
Detect unencrypted messaging configurations.
EBS Volume Analyzer:

Check for unattached EBS volumes.
Identify volumes with low utilization.
KMS Key Analyzer:

Analyze KMS keys for unused or outdated keys.
Detect keys with overly permissive key policies.
Elasticache Cluster Analyzer:

Check for public accessibility of Elasticache clusters.
Identify underutilized or over-provisioned clusters.
EKS Cluster Analyzer:

Analyze EKS clusters for vulnerabilities and missing patches.
Detect idle or unused EKS clusters.
Config Rule Analyzer:

Analyze AWS Config rules to ensure compliance with organizational policies.
Detect non-compliant resources and configurations.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant