assess-mozilla-aws-security-infrastructure
This tool scans Mozilla AWS accounts checking for security infrastructure. It reports accounts which are missing elements of that infrastructure.
This includes any accounts either missing or with misconfigured
- GuardDuty IAM Roles that the GuardDuty Multi Account Master uses to accept invitations
- GuardDuty relationships between member and parent
- CloudTrail
- Security Audit IAM Roles and Incident Response IAM Roles
- Mozilla Single Sign On (SSO)
Usage
Run assess-mozilla-aws-security-infrastructure
Future Work
Currently, the tool just prints out information. This could be improved or turned into machine-readable structured data
The tool does not assess whether there are any IAM users with passwords defined in an account that has SSO enabled (these IAM users should be removed in favor of SSO)
1 maintainer
Metadata
1 maintainer
Release files for assess-mozilla-aws-security-infrastructure 1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| assess-mozilla-aws-security-infrastructure-1.0.tar.gz | 14.4 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| assess_mozilla_aws_security_infrastructure-1.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 29.7 kB
Release files / assess-mozilla-aws-security-infrastructure-1.0.tar.gz
| Download URL | assess-mozilla-aws-security-infrastructure-1.0.tar.gz |
|---|---|
| Size | 14.4 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
81dffbea7f4a2b9df692a0aea379c0b872bc940a000fea42ce89ebdd5856d3bf
|
|
BLAKE2b-256 checksum How to use checksums |
00781e0d637fb77a904ce077660cbdb72ea49f2bda7f55c3e0991b98e3c1c9a2
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.2 CPython/3.10.8
|
Release files / assess_mozilla_aws_security_infrastructure-1.0-py3-none-any.whl
| Download URL | assess_mozilla_aws_security_infrastructure-1.0-py3-none-any.whl |
|---|---|
| Size | 15.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
8e1a16c0a953412e129ae5937b1be40f423563c1009b7622574decf24d79cbaf
|
|
BLAKE2b-256 checksum How to use checksums |
bce3887ce9742fc8a625bce7b3275f5aa5b37f7894a50fe69fce0a9fdbf44397
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.2 CPython/3.10.8
|
Security for assess-mozilla-aws-security-infrastructure 1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
