https://github.com/carlospolop/Cloudtrail2IAM

https://github.com/carlospolop/Cloudtrail2IAM

Last synced: 25 days ago
JSON representation

• Host: GitHub
• URL: https://github.com/carlospolop/Cloudtrail2IAM
• Owner: carlospolop
• Created: 2023-03-16T22:47:37.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2023-03-20T10:38:46.000Z (over 1 year ago)
• Last Synced: 2024-11-11T05:51:38.554Z (about 1 month ago)
• Language: Python
• Size: 7.81 KB
• Stars: 16
• Watchers: 3
• Forks: 2
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-cloud-security - 地址

README

        
# Cloudtrail2IAM

**CloudTrail2IAM** is a Python tool that analyzes **AWS CloudTrail logs to extract and summarize actions** done by everyone or just an specific user or role. The tool will **parse every cloudtrail log from the indicated bucket**.

This is useful for red teamers that have **read access over Cloudtrail logs and wants to have more info about the permissions** of the roles and users but **doesn't have read access over IAM**.

*Note that a Cloudtrail bucket might contain hundreds of thousands of log files. So this could take several minutes/hours.*

## Installation

```sh

git clone https://github.com/carlospolop/Cloudtrail2IAM

cd Cloudtrail2IAM

pip install -r requirements.txt

python3 cloudtrail2IAM.py --prefix PREFIX --bucket-name BUCKET_NAME --profile PROFILE [--filter-name FILTER_NAME] [--threads THREADS]

```