Skip to main content

Test automation to determine adherence to pre-defined set of security recommendations

Project description

# Runtime #### Requirements - Python: 2.7.12 - Boto3: 1.4.1

#### Configuring Tests

##### Credentials

Credentials need to be setup as described in [Boto3 Documentation]( Access needed by the users’ API keys configured:

##### Tests to run

Setup a config file similar to [default.yml]( to execute desired tests. Value for each test should be True or False.

#### Execution Steps

##### Run as script python -c config/default.yml - Will use the credentials from the environment variables if found or will fall back to the default profile in ~/.aws/config

python -c config/default.yml -p profile_name - Will use the credentials from the corresponding profile defined in ~/.aws/config

#### Artifacts

Certain artifacts will be created at the end of every execution for additional verification. The will be in the artifacts directory

root_login.txt : Will be useful in monitoring root account access in case CloudWatch is not used.

sns_subscribers.csv : Lists subscribers for each SNS topic. Can be used to ensure notifications are being sent to the right audience.

internet_open_security_groups.csv : Lists security groups with access open to the Internet. This list might contain rules where access open from the Internet is desired, but can also be used to check for misconfigurations.

# License Apache License 2.0

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Files for aws-security-test, version 0.1.0
Filename, size File type Python version Upload date Hashes
Filename, size aws_security_test-0.1.0-py2-none-any.whl (30.6 kB) File type Wheel Python version 2.7 Upload date Hashes View
Filename, size aws-security-test-0.1.0.tar.gz (20.3 kB) File type Source Python version None Upload date Hashes View

Supported by

AWS AWS Cloud computing Datadog Datadog Monitoring DigiCert DigiCert EV certificate Facebook / Instagram Facebook / Instagram PSF Sponsor Fastly Fastly CDN Google Google Object Storage and Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Salesforce Salesforce PSF Sponsor Sentry Sentry Error logging StatusPage StatusPage Status page