Module · v1.0.0
Cloud accounts (AWS, Azure)
Read an AWS account's or an Azure subscription's security settings over the providers' APIs, from a queue worker, as rows compliance checks read.
Use cases
- AWS: the IAM password policy, root MFA and access keys, CloudTrail trails and whether they log, the S3 account public-access block, security groups open to the world on 22 and 3389, and AWS Config recording.
- Azure: security defaults, Defender for Cloud plans, storage account transport and public access, NSG rules open to the Internet on 22 and 3389, and activity-log export.
- Read-only; credentials come as secret references and are never returned.
Included in packs
Each of these packs carries this module, so installing the pack installs it too.
- Cloud account security baselineCompliance checks for AWS accounts and Azure subscriptions: the cloud module (aws_collect and azure_collect, run on a queue worker with vault-referenced credentials), the cloud-facts table type, and 17 checks over root and IAM credentials, CloudTrail, S3 public access, security groups and NSGs…
keystone