Skip to main content

The multi cloud security group analyzer

Project description

PANOPTES

Panoptes is an automatic security group analyzer focused on reducing the amount of toiling. Mainly focused on AWS, built to be extensible in the future and support the big cloud providers out there.


Prerequisites


For lazy users

There is a Docker image tioxy/panoptes which uses the Dockerfile located in the root of the repository

Python

  • Python >= 3.6
  • pip

For AWS usage

  • AWS CLI installed and configured with your IAM credentials (if you want more customization use Named Profiles)

Installation


Get the latest version of the package from your terminal with pip:

pip install panoptes --upgrade

Getting Started


If you want to see the available options:

panoptesctl aws analyze --help

Generate an AWS analysis with human readable output:

panoptesctl aws analyze --region <YOUR_REGION_CODE>

Generate an AWS analysis with an YML output and a Named Profile from AWS CLI:

panoptesctl aws analyze --region <YOUR_REGION_CODE> --profile <YOUR_PROFILE> --output yml

Check out AWS Regions to see available region codes


Whitelisting


Manually

If you wish to whitelist IPs, not letting the analysis mark them as Unsafe, you can define a sample file with the desired IPs and CIDRs, like the following one:


your_whitelist.txt

111.111.111.111/32
123.123.123.123/32

And then run the analysis with the parameter --whitelist:

panoptesctl aws analyze --region <YOUR_REGION_CODE> --output yml --whitelist /PATH/TO/your_whitelist.txt

Automatically

Panoptes generates automatically a list of IPs which it does not consider harmful from the desired cloud provider.


AWS autogenerated

  • VPC ranges
  • Subnet ranges
  • Private IPs from EC2 VPC Instances
  • Public IPs from EC2 VPC Instances
  • Elastic IPs

Limitations


The Automatic AWS Whitelist feature can't whitelist public and private IP's from EC2 Classic, so make sure that those instances have an Elastic IP attached and their security groups are pointing to the new Elastic IP attached instead of the default EC2 Classic ones.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Files for Panoptes, version 0.4.0
Filename, size File type Python version Upload date Hashes
Filename, size panoptes-0.4.0-py3-none-any.whl (14.4 kB) File type Wheel Python version py3 Upload date Hashes View hashes
Filename, size panoptes-0.4.0.tar.gz (11.2 kB) File type Source Python version None Upload date Hashes View hashes

Supported by

Elastic Elastic Search Pingdom Pingdom Monitoring Google Google BigQuery Sentry Sentry Error logging AWS AWS Cloud computing DataDog DataDog Monitoring Fastly Fastly CDN SignalFx SignalFx Supporter DigiCert DigiCert EV certificate StatusPage StatusPage Status page