Skip to main content

Test automation to determine adherence to pre-defined set of security recommendations

Project description

# Runtime #### Requirements - Python: 2.7.12 - Boto3: 1.4.1

#### Configuring Tests

##### Credentials

Credentials need to be setup as described in [Boto3 Documentation](http://boto3.readthedocs.io/en/latest/guide/configuration.html). Access needed by the users’ API keys configured:

##### Tests to run

Setup a config file similar to [default.yml](https://github.com/mikhailadvani/aws-security-test/blob/master/config/default.yml) to execute desired tests. Value for each test should be True or False.

#### Execution Steps

##### Run as script python aws_security_test.py -c config/default.yml - Will use the credentials from the environment variables if found or will fall back to the default profile in ~/.aws/config

python aws_security_test.py -c config/default.yml -p profile_name - Will use the credentials from the corresponding profile defined in ~/.aws/config

#### Artifacts

Certain artifacts will be created at the end of every execution for additional verification. The will be in the artifacts directory

root_login.txt : Will be useful in monitoring root account access in case CloudWatch is not used.

sns_subscribers.csv : Lists subscribers for each SNS topic. Can be used to ensure notifications are being sent to the right audience.

internet_open_security_groups.csv : Lists security groups with access open to the Internet. This list might contain rules where access open from the Internet is desired, but can also be used to check for misconfigurations.

# License Apache License 2.0

Project details


Release history Release notifications

This version
History Node

0.1.0

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Filename, size & hash SHA256 hash help File type Python version Upload date
aws_security_test-0.1.0-py2-none-any.whl (30.6 kB) Copy SHA256 hash SHA256 Wheel 2.7 Oct 4, 2017
aws-security-test-0.1.0.tar.gz (20.3 kB) Copy SHA256 hash SHA256 Source None Oct 4, 2017

Supported by

Elastic Elastic Search Pingdom Pingdom Monitoring Google Google BigQuery Sentry Sentry Error logging CloudAMQP CloudAMQP RabbitMQ AWS AWS Cloud computing Fastly Fastly CDN DigiCert DigiCert EV certificate StatusPage StatusPage Status page