AWS-audit

Allows to discover AWS misconfiguration and security issues on S3, Lambda Function and IAM Policy attached to those services.

Services

S3

Bucket Policy Audit [principal, resource, action contains *]
AccessPoint Policy Audit [principal, resource, action contains *]
ACL Audit
Public Access Audit
Encryption Configuration
Versioning
Logging
Web Site Audit functionality
Bucket Policy doent not prevent HTTP access

Lambda

Lambda Code Signing Audit
Lambda Role (Policy audit) [principal, resource, action contains *]
Lambda Resource Policy Audit [principal, resource, action contains *]
Lambda Environment Audit

IAM Role

Check for unused role
Check role Policy Audit [principal, resource, action contains *]

How to run

go run AWS-audit.go -c aws-audit-example.yaml