Added Feature/AWS Container Services (ECR,EKS,ECS) #1587
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
This pull request introduces support for key AWS container services—ECR (Elastic Container Registry), EKS (Elastic Kubernetes Service), and ECS (Elastic Container Service) within ScoutSuite. The changes extend the tool's capabilities to comprehensively assess the security posture of AWS environments utilizing container services.
New Features:
AWS Container Service Support:
Integration for ECR, EKS, and ECS services has been implemented, allowing ScoutSuite to analyze and report on the security configuration of these AWS container services.
Sample Rules:
To jumpstart the assessment process, several sample rules have been incorporated to evaluate the vulnerability and compliance status of the AWS container services. These rules cover key security considerations in line with best practices.
HTML Report Validation:
The HTML reports generated by the modified code have been reviewed to confirm that they accurately represent the security posture of AWS container services.
Issue Resolution:
This pull request addresses the concerns raised in GitHub issue #1491, providing the requested support for AWS container services and delivering a comprehensive solution for security assessment within these environments.
Dependencies:
The dependencies have been carefully managed to ensure compatibility and support for the AWS container services. No breaking changes or conflicts with existing dependencies have been introduced.
Your feedback on the introduced features, code changes, and the overall impact on ScoutSuite's capabilities in AWS environments is highly appreciated. Feel free to reach out with any questions or concerns.
Type of change
Select the relevant option(s):
Checklist: