AWS#

Checks for Amazon Web Service (AWS) resources:

checkIam

Check AWS credentials, Identity and Access Management (IAM) and security best practices.

Checks include:

  • Authentication with the default profile or a specified profile

  • Access keys need to be rotated (age >90 days)

  • Root keys and signing certificates have not been created.

checkS3

Check AWS S3 buckets and security settings.

  • Existence and accessibility

  • Public access is disabled

checkSsmParameter

Check AWS Systems Manager (SSM) and related SSM security settings.

  • Parameter existence and type

Warning

Amazon Web Service (AWS) checks require the installation of aws dependencies.

# Install the 'aws' dependency
$ python -m pip install geomancy[aws]
# Install 'all' dependencies
$ python -m pip install geomancy[all]