News for hackers. Stuff that matters.
Re:Show HN: Cloudsplaining, an AWS IAM Security Assessment Tool by fred1991 on Tuesday May 05, 2020 @10:23AM (#23080287)
Damn. The report guidance is really good. I'm going to use this in an assessment next week :) Have to review an account that has hundreds of IAM roles but this should help a lot,.
Re:Show HN: Cloudsplaining, an AWS IAM Security Assessment Tool by kmcquade on Tuesday May 05, 2020 @10:25AM (#23080315)
Thanks! I’m glad you like it. Let me know if you have any feedback - here, in the Gitter channel (link in the Readme), or on Twitter (kmcquade3)
Re:Show HN: Cloudsplaining, an AWS IAM Security Assessment Tool by chmod-noobs on Tuesday May 05, 2020 @10:50AM (#23080594)
What kind of privileges do I need to run it? I don’t see any details in the documentation. You should probably add this there.
Re:Show HN: Cloudsplaining, an AWS IAM Security Assessment Tool by kmcquade on Tuesday May 05, 2020 @11:52AM (#23081360)
You just need a single IAM action - iam:GetAccountAuthorizationDetails (https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetA...).

I’ll definitely add that to the README. Thanks