{"id":23229335,"url":"https://github.com/rootsami/ratkiez","last_synced_at":"2025-08-01T09:33:41.729Z","repository":{"id":266865925,"uuid":"899038508","full_name":"rootsami/ratkiez","owner":"rootsami","description":"A CLI tool to rat on all AWS keys with creation date, last used date, and attached policies.","archived":false,"fork":false,"pushed_at":"2025-02-12T13:08:42.000Z","size":29,"stargazers_count":4,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-06-03T14:41:48.476Z","etag":null,"topics":["aws","awscli","keys","scan","security"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rootsami.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-12-05T14:05:19.000Z","updated_at":"2025-01-31T14:28:43.000Z","dependencies_parsed_at":null,"dependency_job_id":"58ab28c1-a1da-458e-8a06-93704e81adf5","html_url":"https://github.com/rootsami/ratkiez","commit_stats":null,"previous_names":["rootsami/ratkiez"],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/rootsami/ratkiez","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rootsami%2Fratkiez","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rootsami%2Fratkiez/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rootsami%2Fratkiez/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rootsami%2Fratkiez/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rootsami","download_url":"https://codeload.github.com/rootsami/ratkiez/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rootsami%2Fratkiez/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":268199342,"owners_count":24211823,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-01T02:00:08.611Z","response_time":67,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","awscli","keys","scan","security"],"created_at":"2024-12-19T01:17:56.112Z","updated_at":"2025-08-01T09:33:41.499Z","avatar_url":"https://github.com/rootsami.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Ratkiez :rat::old_key:\n\nA CLI tool to rat on all aws keys based on creation date, last used date, and attached policies.\n\nOutput is supported in multiple formats: json, table, and csv.\n\n## Prerequisites\n\n- Configured AWS credentials\n- Set `export AWS_SDK_LOAD_CONFIG=1` in your shell profile\n\n## Usage\n\n```bash\nusage: ratkiez [\u003cflags\u003e] \u003ccommand\u003e [\u003cargs\u003e ...]\n\nA CLI tool to rat on all AWS keys based on creation date and last used date\n\nFlags:\n  --help                 Show context-sensitive help (also try --help-long and --help-man).\n  --region=\"us-west-2\"   AWS region\n  --profile=default ...  AWS profiles, reusable to add more profiles\n  --all-profiles         Use all profiles in ~/.aws/config\n  --format=table         Output format, json, table or csv\n  --org                  Scan all organization member accounts\n  --role-name=\"OrganizationAccountAccessRole\"  \n                         Role name to assume in organization member accounts\n\nCommands:\n  help [\u003ccommand\u003e...]\n    Show help.\n\n  scan\n    Scan all AWS keys. ex: ratkiez scan --profile profile1 --profile profile2\n\n  user [\u003cuser\u003e...]\n    Scan by username(s), ex: ratkiez user john.doe jane.doe --profile profile1\n\n  key [\u003ckey\u003e...]\n    Scan by key-id(s), ex: ratkiez key AKIA1234 AKIA5678 --all-profiles\n```\n\n## Examples\n\n### Scan Single Account Profile\n```bash\n# Scan all users in the specified aws account\nratkiez scan --profile aws-profile-eu-central-1 --format table\n\n# Scan all users in multiple aws account\nratkiez scan --profile aws-profile-eu-central-1 --profile aws-profile-us-west-2 --format table\n\n```\n\n### Scan An Organization Profile with Multiple Accounts\n```bash\n# Scan all users in all member accounts of an organization\nratkiez scan --profile aws-org-profile --org --format table\n\n# Scan all users in all member accounts of an organization with custom role name\nratkiez scan --profile aws-org-profile --org --role-name OrganizationAccountAccessRole --format table\n```\nSample output:\n```\nUSERNAME                                KEY-ID                  CREATION-DATE                    LAST-USED-DATE                 POLICIES                               PROFILE                    ACCOUNT_NAME                   ACCOUNT_ID\nexample-lambda-user                     AKIASWXXXXXXXXXXXX      2021-02-15 10:53:57 +0000 UTC    Never Used                     AWSLambda_FullAccess                   org-management-account     management-account             123456789014\nxxxxx-sns-user                          AKIASWXXXXXXXXXXXX      2021-02-15 10:53:57 +0000 UTC    Never Used                     AWSLambda_FullAccess                   aws-profile-eu-central-1   member-account-1               123456789012\ns3-controller                           AKIASWXXXXXXXXXXXX      2020-05-15 08:07:18 +0000 UTC    2020-10-15 08:30:00 +0000 UTC  AmazonS3FullAccess                     aws-profile-us-west-2      member-account-2               123456789013\n```\n\n\n### Scan All Profiles\n```bash\n# Scan all users in all aws accounts configured in ~/.aws/config\nratkiez scan --all-profiles --format table\n```\n\nSample output:\n```\nUSERNAME                                KEY-ID                  CREATION-DATE                    LAST-USED-DATE                 POLICIES                               PROFILE                    ACCOUNT_NAME                   ACCOUNT_ID\nxxxxx-sns-user                          AKIASWXXXXXXXXXXXX      2021-02-15 10:53:57 +0000 UTC    Never Used                     AWSLambda_FullAccess                   aws-profile-eu-central-1\ns3-controller                           AKIASWXXXXXXXXXXXX      2020-05-15 08:07:18 +0000 UTC    2020-10-15 08:30:00 +0000 UTC  AmazonS3FullAccess                     aws-profile-us-west-2\nexample-lambda-user                     AKIASWXXXXXXXXXXXX      2021-02-15 10:53:57 +0000 UTC    Never Used                     AWSLambda_FullAccess                   aws-profile-us-west-2\n```\n\n### Look Up Specific User\n```bash\n# Look up specific users in one account\nratkiez user example-lambda-user s3-controller --profile aws-profile-us-west-2 --format json\n\n# Look up user across all profiles\nratkiez user example-lambda-user --all-profiles --format json\n```\n\n### Look Up Specific Key\n```bash\n# Look up a specific access key\nratkiez key AKIASWXXXXXXXXXXXXXX --profile aws-playground-eu --format json\n\n# Look up specific keys across all profiles\nratkiez key AKIASWXXXXXXXXXXXXXX AKIASWXXXXXXXXXXXXXX --all-profiles --format json\n```\n\n## Installation\n\n### Binary\n\nDownload the binary from the [releases](https://github.com/rootsami/ratkiez/releases)\n\n### Build from source\n\nPrerequisites:\n- [Go](https://golang.org/doc/install)\n\n```bash\n\n$ git clone https://github.com/rootsami/ratkiez.git\n$ go build -o ratkiez cmd/ratkiez/main.go\n\n```\n\n## License\n[MIT](LICENSE)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frootsami%2Fratkiez","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frootsami%2Fratkiez","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frootsami%2Fratkiez/lists"}