https://github.com/aws-samples/scp-analyzer

https://github.com/aws-samples/scp-analyzer

Last synced: 3 months ago
JSON representation

• Host: GitHub
• URL: https://github.com/aws-samples/scp-analyzer
• Owner: aws-samples
• License: mit-0
• Created: 2021-05-28T23:47:51.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2024-11-16T13:30:14.000Z (3 months ago)
• Last Synced: 2024-11-16T14:26:58.544Z (3 months ago)
• Language: Python
• Size: 299 KB
• Stars: 24
• Watchers: 4
• Forks: 3
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE
  • Code of conduct: CODE_OF_CONDUCT

Awesome Lists containing this project

README

        
# Service Control Policy Analyzer

This tool collects and presents all the Service Control Policies (SCPs) applicable to each account in an AWS Organization. It's purpose is to help developers and security teams understand how SCPs might be blocking activities in any account of the AWS Organization.

## Sample output

![scp-analyzeroutput](doc/sample-output.png)

## Installation

`pip install scp-analyzer` 

## Use

Obtain AWS CLI credentials to the Organizations Management account or a delegated administration account. Ensure you have Organizations Read Only permissions and run `scp-analyzer` to collect data. The tool will write output to a csv file.

## Security

See [CONTRIBUTING](CONTRIBUTING.md#security-issue-notifications) for more information.

## License

This library is licensed under the MIT-0 License. See the LICENSE file.