Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/riotgames/cloud-inquisitor

Enforce ownership and data security within AWS
https://github.com/riotgames/cloud-inquisitor

Last synced: 11 days ago
JSON representation

Enforce ownership and data security within AWS

Host: GitHub
URL: https://github.com/riotgames/cloud-inquisitor
Owner: RiotGames
License: apache-2.0
Archived: true
Created: 2017-11-17T21:00:20.000Z (almost 7 years ago)
Default Branch: master
Last Pushed: 2020-10-07T19:40:27.000Z (about 4 years ago)
Last Synced: 2024-10-01T18:39:32.923Z (about 1 month ago)
Language: Python
Homepage: https://cloud-inquisitor.readthedocs.io/
Size: 52.3 MB
Stars: 446
Watchers: 41
Forks: 37
Open Issues: 31
Metadata Files:
- Readme: README.md
- License: LICENSE

Awesome Lists containing this project

README

        


# Cloud Inquisitor is Under Construction

Cloud Inquisitor is currently undergoing a refresh to embrace newer cloud-native technologies while also realigning on its core vision.

You can follow our work in the branch `cinq_next_master`.

The project will no longer accept external PRs against the code base and will be grooming and closing any issues we do not believe will be pertanent to Cloud Inquisitors new alignment.

However, we will still accept feature requests in the form of an issue but will prioritize the replacement of target features within Cloud Inquisitor over new features. 

Now back to the original Readme

---

---

|        | License | Release | Travis CI |

|--------|---------|---------|-----------|

| master | [![](https://img.shields.io/github/license/RiotGames/cloud-inquisitor.svg)](https://www.apache.org/licenses/LICENSE-2.0) | [![](https://img.shields.io/github/release/RiotGames/cloud-inquisitor.svg)](https://github.com/RiotGames/cloud-inquisitor/releases/latest) | [![Build Status](https://travis-ci.org/RiotGames/cloud-inquisitor.svg?branch=master)](https://travis-ci.org/RiotGames/cloud-inquisitor) |

| dev    | [![](https://img.shields.io/github/license/RiotGames/cloud-inquisitor.svg)](https://www.apache.org/licenses/LICENSE-2.0) | ![](https://img.shields.io/github/release-pre/RiotGames/cloud-inquisitor.svg) | [![Build Status](https://travis-ci.org/RiotGames/cloud-inquisitor.svg?branch=dev)](https://travis-ci.org/RiotGames/cloud-inquisitor) |

# Introduction

Cloud Inquisitor can be used to improve the security posture of your AWS footprint through:

* monitoring AWS objects for ownership attribution, notifying account owners of unowned objects, and subsequently removing unowned AWS objects if ownership is not resolved.

* detecting [domain hijacking](https://labs.detectify.com/2014/10/21/hostile-subdomain-takeover-using-herokugithubdesk-more/).

* verifying security services such as [Cloudtrail](https://aws.amazon.com/cloudtrail/) and [VPC Flowlogs](https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/flow-logs.html).

* managing [IAM policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html) across multiple accounts.

Please see the official docs [here](https://cloudinquisitor.readthedocs.io/en/latest/) for more information on how to deploy, configure and operate Cloud Inquisitor in your environment.

If you would like to contribute, please check out our [Contributing Guidelines](https://cloudinquisitor.readthedocs.io/en/latest/contributing.html).