https://github.com/jeffmaley/awsssoreporting
Reports on Users/Group, Permission Sets, and Account Assignments
https://github.com/jeffmaley/awsssoreporting
audit aws cloud-computing cloud-security cloud-security-audit iam secops security security-tools
Last synced: 5 months ago
JSON representation
Reports on Users/Group, Permission Sets, and Account Assignments
- Host: GitHub
- URL: https://github.com/jeffmaley/awsssoreporting
- Owner: jeffmaley
- License: mit
- Created: 2023-08-10T23:17:55.000Z (almost 3 years ago)
- Default Branch: main
- Last Pushed: 2024-04-04T17:14:43.000Z (about 2 years ago)
- Last Synced: 2026-01-02T15:47:01.253Z (6 months ago)
- Topics: audit, aws, cloud-computing, cloud-security, cloud-security-audit, iam, secops, security, security-tools
- Language: Python
- Homepage:
- Size: 17.6 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# awsssoreporting.py
## Description
AWS IAM Identity Center (FKA AWS SSO) connects an IdP to an AWS Organization. Identities are granted access (in the form of Permission Sets) to accounts. The combined identity/permission set/account binding is called an *assignment*. It is challenging to use the AWS Console to generate a report of all granted access. This package provides a way of reporting this access to the terminal or a CSV.
## Installation
`python3 -m pip install boto3`
`python3 -m pip install awsssoreporting`
## Usage
Because this utility uses the AWS IAM Identity Center and Organization APIs, it must be run from the Organization management account.
`export AWS_PROFILE=`
`export AWS_DEFALT_REGION=`
awsssoreporting.py \[-a | -u\] -c -f myfile.csv -q
* -a Report access by AWS account
* -u Report access by identity
* -c Write the results to a CSV
* -f The filename to write the CSV to. Otherwise, the default (aws_sso_reporting-\.csv) is used
* -q Quite mode. No results printed to terminal. The default is False.
### TODO
* Support more than one AWS Identity Center Instance