Re:ScoutSuite: Multi-cloud security auditing tool
by ruffrey on Thursday May 21, 2020 @04:57PM
(#23265200)
What are the benefits of using this over Amazon Inspector?
[ Parent
| on HN ]
Re:ScoutSuite: Multi-cloud security auditing tool
by cj on Thursday May 21, 2020 @05:02PM
(#23265286)
Perhaps beneficial to companies utilizing multiple clouds wanting 1 tool and 1 process for auditing across clouds
Re:ScoutSuite: Multi-cloud security auditing tool
by xga2 on Friday May 22, 2020 @10:14AM
(#23272267)
note - I'm the project's maintainer
Correct, Scout Suite is inherently multi-cloud and has mature support for AWS/Azure/GCP. This is very useful for organizations that want to leverage a single tool to assess the posture of all their environments.
Re:ScoutSuite: Multi-cloud security auditing tool
by xga2 on Friday May 22, 2020 @07:33AM
(#23270972)
note - I'm the project's maintainer
AWS Inspector allows assessing the baseline security of EC2 instances / hosts, i.e. against CIS benchmarks (https://docs.aws.amazon.com/inspector/latest/userguide/inspe...). Scout Suite assesses the security posture of the cloud environment as a whole, across all [supported] services. It looks at things such as encryption, configuration of Identity and Access Management, resilience, backup configuration, privilege escalation vectors, etc.