Scott Piper comments

Results 119 comments of


                                            Scott Piper

Download parsed data

http://hackworthy.blogspot.no/2012/05/savedownload-data-generated-in.html

Admin policy not using a Resource of *

My understanding is the same as yours, although I've not dug into what all could happen with a policy like this. This warning was mostly for my own benefit as...

Take Organization Cloudtrails into account

There's nothing to do for this other than possibly saying that an organization trail is better than a normal trail.

Take Organization Cloudtrails into account

I just want an info issue if the trail is not an organization trail.

Regions data not found when account ID starts with a zero

Yikes, thanks for reporting @jtyers. I'll look into it.

Report's "Counts of finding types by account" seems to be incorrect

Looks like this is fixed by #808

Separate out new principals from ones that have not been used for 90 days in the IAM report

A simple way of doing this is adding the following to https://github.com/duo-labs/cloudmapper/blob/4f5ec6f6eaffdef4c8d14a628215747b548fbc2d/commands/iam_report.py#L104 ``` created = datetime.datetime.strptime(principal_auth["CreateDate"][0:10], "%Y-%m-%d") principal_age = (job_completion_date - created).days if principal_age < args.max_age: stats["is_inactive"] = False ```

Scott Piper

Download parsed data

Admin policy not using a Resource of *

Take Organization Cloudtrails into account

Take Organization Cloudtrails into account

Regions data not found when account ID starts with a zero

Report's "Counts of finding types by account" seems to be incorrect

Separate out new principals from ones that have not been used for 90 days in the IAM report

Separate out new principals from ones that have not been used for 90 days in the IAM report

Unknown federation provider: arn:aws:iam::010337476630:saml-provider/DAA

AWS GovCloud Regions Fail to Collect Data