aws

package

Go to main page

Versions in this module

v1

v1.14.0

Apr 16, 2024

Changes in this version

+ func CapeTUI(outputFiles []string)

+ func InitIAMClient(AWSConfig aws.Config) *iam.Client

+ type AllAccountData struct

+ Files map[string]*PerAccountData

+ type CapeCommand struct

+ AWSConfig aws.Config

+ AWSOutputDirectory string

+ AWSOutputType string

+ AWSProfile string

+ AWSRegions []string

+ AWSTableCols string

+ AccountsNotAnalyzed []string

+ AnalyzedAccounts map[string]CapeJobInfo

+ Caller sts.GetCallerIdentityOutput

+ CapeAdminOnly bool

+ Cmd cobra.Command

+ GlobalGraph graph.Graph[string, string]

+ Goroutines int

+ PmapperDataBasePath string

+ SkipAdminCheck bool

+ Verbosity int

+ Version string

+ WrapTable bool

+ func (m *CapeCommand) RunCapeCommand()

+ type CapeJSON struct

+ Account string

+ IsTargetAdmin string

+ Source string

+ Summary string

+ Target string

+ type CapeJobInfo struct

+ AccountID string

+ AdminOnlyAnalysis bool

+ AnalyzedSuccessfully bool

+ Profile string

+ Source string

type CodeBuildModule

+ PmapperDataBasePath string

+ type Directory struct

+ AccessURL string

+ Alias string

+ DNS string

+ DirectoryId string

+ NetBios string

+ OsVersion string

+ Region string

+ TrustInfo string

+ type DirectoryModule struct

+ AWSConfig aws.Config

+ AWSMFAToken string

+ AWSOutputType string

+ AWSProfile string

+ AWSProfileProvided string

+ AWSProfileStub string

+ AWSRegions []string

+ AWSTableCols string

+ Caller sts.GetCallerIdentityOutput

+ CloudFoxVersion string

+ CommandCounter internal.CommandCounter

+ DSClient sdk.AWSDSClientInterface

+ Directories []Directory

+ Goroutines int

+ WrapTable bool

+ func (m *DirectoryModule) PrintDirectories(outputDirectory string, verbosity int)

+ func (m *DirectoryModule) Receiver(receiver chan Directory, receiverDone chan bool)

type ECSTasksModule

+ PmapperDataBasePath string

type EKSModule

+ PmapperDataBasePath string

+ type GraphCommand struct

+ AWSConfig aws.Config

+ AWSOutputDirectory string

+ AWSOutputType string

+ AWSProfile string

+ AWSRegions []string

+ AWSTableCols string

+ Caller sts.GetCallerIdentityOutput

+ Goroutines int

+ PmapperDataBasePath string

+ SkipAdminCheck bool

+ Verbosity int

+ Version string

+ WrapTable bool

+ func (m *GraphCommand) RunGraphCommand()

type IamPermissionsModule

+ func InitPermissionsClient(caller sts.GetCallerIdentityOutput, AWSProfile string, cfVersion string, ...) IamPermissionsModule

+ func (m *IamPermissionsModule) GetGAAD()

+ func (m *IamPermissionsModule) ParsePermissions(principal string)

type IamSimulatorModule

+ func InitIamCommandClient(iamSimPPClient sdk.AWSIAMClientInterface, caller sts.GetCallerIdentityOutput, ...) IamSimulatorModule

type InstancesModule

+ PmapperDataBasePath string

type LambdasModule

+ PmapperDataBasePath string

type Node

+ AccountID string

+ CanPrivEscToAdminString string

+ IsAdminString string

+ Name string

+ TrustedFederatedProviders []TrustedFederatedProvider

+ TrustedPrincipals []TrustedPrincipal

+ TrustedServices []TrustedService

+ TrustsDoc policy.TrustPolicyDocument

+ Type string

+ VendorName string

+ func ConvertIAMRoleToNode(role types.Role, vendors *knownawsaccountslookup.Vendors, ...) Node

+ func ConvertIAMUserToNode(user types.User) Node

+ func FindVerticesInRoleTrust(a Node, vendors *knownawsaccountslookup.Vendors) []Node

+ func MergeNodes(nodes []Node) []Node

+ func (a *Node) MakeRoleEdges(GlobalGraph graph.Graph[string, string])

type OrgModule

+ func InitOrgsClient(caller sts.GetCallerIdentityOutput, AWSProfile string, cfVersion string, ...) OrgModule

type OutboundAssumeRoleEntry

+ Action string

+ type PerAccountData struct

+ FilePath string

+ PrivescPaths []CapeJSON

type PmapperModule

+ PmapperDataBasePath string

+ func InitPmapperGraph(Caller sts.GetCallerIdentityOutput, AWSProfile string, Goroutines int, ...) (PmapperModule, error)

+ func (m *PmapperModule) GenerateCypherStatements(goCtx context.Context, driver neo4j.DriverWithContext) error

+ type PmapperOutputRow struct

+ End string

+ Paths []string

+ Start string

type RoleTrustsModule

+ PmapperDataBasePath string

+ type TrustedFederatedProvider struct

+ ProviderAccountId string

+ ProviderShortName string

+ TrustedFederatedProvider string

+ TrustedSubjects []string

+ type TrustedPrincipal struct

+ AccountIsInAnalyzedAccountList bool

+ ExternalID string

+ TrustedPrincipal string

+ VendorName string

+ type TrustedService struct

+ AccountID string

+ TrustedService string

type WorkloadsModule

+ PmapperDataBasePath string

v1.13.4

Mar 15, 2024

Changes in this version

type Database

+ Roles string

type DatabasesModule

+ NeptuneClient sdk.NeptuneClientInterface

v1.13.3

Feb 8, 2024

v1.13.2

Feb 2, 2024

v1.13.1

Jan 26, 2024

Changes in this version

type IamSimulatorModule

+ AWSProfileProvided string

+ AWSProfileStub string

type ResourceTrustsModule

+ AWSConfig aws.Config

+ AWSProfileProvided string

+ AWSProfileStub string

v1.13.0

Dec 26, 2023

Changes in this version

+ var CURL_COMMAND string = "curl -X %s %s"

+ type ApiGateway struct

+ AWSService string

+ ApiKey string

+ Endpoint string

+ Method string

+ Name string

+ Public string

+ Region string

+ type ApiGwModule struct

+ APIGatewayClient *apigateway.Client

+ APIGatewayv2Client *apigatewayv2.Client

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter internal.CommandCounter

+ Errors []string

+ Gateways []ApiGateway

+ Goroutines int

+ WrapTable bool

+ func (m *ApiGwModule) ApiGatewayApiKeyRequired(r string, ApiId *string, ResourceId *string, method string) bool

+ func (m *ApiGwModule) GetApiGatewayApiKey(r string, ApiId string, Stage string) (string, error)

+ func (m *ApiGwModule) PrintApiGws(outputDirectory string, verbosity int)

+ func (m *ApiGwModule) Receiver(receiver chan ApiGateway, receiverDone chan bool)

+ type Workload struct

+ AWSService string

+ Admin string

+ Arn string

+ CanPrivEsc string

+ Name string

+ Public string

+ Region string

+ Role string

+ Type string

+ type WorkloadsModule struct

+ AWSOutputType string

+ AWSProfile string

+ AWSRegions []string

+ AWSTableCols string

+ AppRunnerClient sdk.AppRunnerClientInterface

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter internal.CommandCounter

+ EC2Client sdk.AWSEC2ClientInterface

+ ECSClient sdk.AWSECSClientInterface

+ Goroutines int

+ IAMClient sdk.AWSIAMClientInterface

+ InstanceProfileToRolesMap map[string][]iamTypes.Role

+ LambdaClient sdk.LambdaClientInterface

+ SkipAdminCheck bool

+ Workloads []Workload

+ WrapTable bool

+ func (m *WorkloadsModule) PrintWorkloads(outputDirectory string, verbosity int)

+ func (m *WorkloadsModule) Receiver(receiver chan Workload, receiverDone chan bool)

v1.12.3

Dec 19, 2023

Changes in this version

+ var AWSRegions = []string

+ func InitGlueClient(caller sts.GetCallerIdentityOutput, AWSProfile string, cfVersion string, ...) *glue.Client

+ func InitSecretsManagerClient(caller sts.GetCallerIdentityOutput, AWSProfile string, cfVersion string, ...) *secretsmanager.Client

type AccessKeysModule

+ AWSOutputType string

+ AWSTableCols string

+ type BucketRow struct

+ AWSService string

+ Access string

+ Actions string

+ Arn string

+ ConditionText string

+ IsConditionallyPublic string

+ IsPublic string

+ Name string

+ Policy policy.Policy

+ PolicyJSON string

+ Region string

+ ResourcePolicySummary string

+ Statement string

type BucketsModule

+ AWSOutputType string

+ AWSTableCols string

+ CheckBucketPolicies bool

type CloudformationModule

+ AWSOutputType string

+ AWSTableCols string

type CodeBuildModule

+ AWSOutputType string

+ AWSTableCols string

type DatabasesModule

+ AWSOutputType string

+ AWSTableCols string

type ECRModule

+ AWSOutputType string

+ AWSTableCols string

type ECSTasksModule

+ AWSOutputType string

+ AWSTableCols string

type EKSModule

+ AWSOutputType string

+ AWSTableCols string

type ElasticNetworkInterfacesModule

+ AWSOutputType string

+ AWSTableCols string

type EndpointsModule

+ AWSOutputType string

+ AWSTableCols string

type EnvsModule

+ AWSOutputType string

+ AWSTableCols string

type FilesystemsModule

+ AWSOutputType string

+ AWSTableCols string

type IamPermissionsModule

+ AWSOutputType string

+ AWSTableCols string

type IamPrincipalsModule

+ AWSOutputType string

+ AWSTableCols string

type IamSimulatorModule

+ AWSOutputType string

+ AWSTableCols string

type InstancesModule

+ AWSOutputType string

+ AWSTableCols string

type Inventory2Module

+ AWSOutputType string

+ AWSTableCols string

+ Cloud9Client *cloud9.Client

type Lambda

+ Arn string

type LambdasModule

+ AWSOutputType string

+ AWSTableCols string

type NetworkPortsModule

+ AWSOutputType string

+ AWSTableCols string

type OrgModule

+ AWSOutputType string

+ AWSTableCols string

type OutboundAssumedRolesModule

+ AWSOutputType string

+ AWSTableCols string

type PermissionsRow

+ PolicyArn string

type PmapperModule

+ AWSOutputType string

+ AWSTableCols string

type RAMModule

+ AWSOutputType string

+ AWSTableCols string

type Resource2

+ HasConditions string

+ TrustedPrincipals string

+ TrustsAllAccounts string

+ TrustsCrossAccount string

type ResourceTrustsModule

+ AWSMFAToken string

+ AWSOutputType string

+ AWSTableCols string

+ type RoleTrustRow struct

+ CanPrivEsc string

+ ExternalID string

+ IsAdmin string

+ RoleARN string

+ RoleName string

+ TrustedFederatedProvider string

+ TrustedFederatedSubject string

+ TrustedPrincipal string

+ TrustedService string

type RoleTrustsModule

+ AWSOutputType string

+ AWSTableCols string

+ RoleTrustTable []RoleTrustRow

type Route53Module

+ AWSOutputType string

+ AWSTableCols string

type SNSModule

+ AWSOutputType string

+ AWSTableCols string

type SQSModule

+ AWSOutputType string

+ AWSTableCols string

type SecretsModule

+ AWSOutputType string

+ AWSTableCols string

type TagsModule

+ AWSOutputType string

+ AWSTableCols string

v1.12.2

Sep 6, 2023

v1.12.1

Sep 6, 2023

v1.12.0

Aug 15, 2023

Changes in this version

type ECSTasksModule

+ EC2Client sdk.AWSEC2ClientInterface

+ ECSClient sdk.AWSECSClientInterface

type ElasticNetworkInterfacesModule

+ EC2Client sdk.AWSEC2ClientInterface

type Inventory2Module

+ AthenaClient *athena.Client

+ CodeArtifactClient sdk.AWSCodeArtifactClientInterface

+ CodeCommitClient sdk.AWSCodeCommitClientInterface

+ CodeDeployClient sdk.AWSCodeDeployClientInterface

+ DataPipelineClient sdk.AWSDataPipelineClientInterface

+ ECRClient sdk.AWSECRClientInterface

+ EMRClient sdk.AWSEMRClientInterface

+ ElasticBeanstalkClient sdk.AWSElasticBeanstalkClientInterface

+ ElasticacheClient sdk.AWSElastiCacheClientInterface

+ KinesisClient sdk.AWSKinesisClientInterface

+ Route53Client sdk.AWSRoute53ClientInterface

+ func (m *Inventory2Module) GetEMRInstancesPerRegion(r string, wg *sync.WaitGroup, semaphore chan struct{})

v1.11.3

Jun 28, 2023

v1.11.2

Jun 14, 2023

v1.11.1

Jun 9, 2023

v1.11.0

Jun 9, 2023

Changes in this version

+ func GetResourceNameFromArn(arn string) string

+ type Account struct

+ Arn string

+ Email string

+ Id string

+ Name string

+ OrgId string

+ ProfileName string

+ Status string

+ type CodeBuildModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CodeBuildClient sdk.CodeBuildClientInterface

+ CommandCounter internal.CommandCounter

+ Goroutines int

+ IAMClient sdk.AWSIAMClientInterface

+ OutputFormat string

+ Projects []Project

+ SkipAdminCheck bool

+ WrapTable bool

+ func InitCodeBuildClient(caller sts.GetCallerIdentityOutput, AWSProfile string, cfVersion string, ...) CodeBuildModule

+ func (m *CodeBuildModule) PrintCodeBuildProjects(outputFormat string, outputDirectory string, verbosity int)

+ func (m *CodeBuildModule) Receiver(receiver chan Project, receiverDone chan bool)

+ type Database struct

+ AWSService string

+ Arn string

+ Endpoint string

+ Engine string

+ Name string

+ Port int32

+ Protocol string

+ Public string

+ Region string

+ Size string

+ UserName string

+ type DatabasesModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter internal.CommandCounter

+ Databases []Database

+ DocDBClient sdk.DocDBClientInterface

+ DynamoDBClient sdk.DynamoDBClientInterface

+ Errors []string

+ Goroutines int

+ OutputFormat string

+ RDSClient sdk.RDSClientInterface

+ RedshiftClient sdk.RedShiftClientInterface

+ WrapTable bool

+ func (m *DatabasesModule) PrintDatabases(outputFormat string, outputDirectory string, verbosity int)

+ func (m *DatabasesModule) Receiver(receiver chan Database, receiverDone chan bool)

type ECRModule

+ func InitECRClient(caller sts.GetCallerIdentityOutput, AWSProfile string, cfVersion string, ...) ECRModule

type ECSTasksModule

+ IAMClient sdk.AWSIAMClientInterface

type EKSModule

+ EKSClient sdk.EKSClientInterface

+ IAMClient sdk.AWSIAMClientInterface

type FilesystemObject

+ Permissions string

type FilesystemsModule

+ func InitFileSystemsClient(caller sts.GetCallerIdentityOutput, AWSProfile string, cfVersion string, ...) FilesystemsModule

type Inventory2Module

+ CodeBuildClient sdk.CodeBuildClientInterface

+ StepFunctionClient sdk.StepFunctionsClientInterface

type LambdasModule

+ func InitLambdaClient(caller sts.GetCallerIdentityOutput, AWSProfile string, cfVersion string, ...) LambdasModule

type MappedECSTask

+ TaskDefinitionContent string

+ TaskDefinitionName string

+ type Org struct

+ ChildAccounts []Account

+ MgmtAccount string

+ OrgId string

+ type OrgModule struct

+ AWSProfile string

+ AWSRegions []string

+ Accounts []Account

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter internal.CommandCounter

+ DescribeOrgOutput *types.Organization

+ Goroutines int

+ OrganizationsClient sdk.OrganizationsClientInterface

+ Orgs map[string]Org

+ OutputFormat string

+ SkipAdminCheck bool

+ WrapTable bool

+ func InitOrgClient(caller sts.GetCallerIdentityOutput, AWSProfile string, cfVersion string, ...) OrgModule

+ func (m *OrgModule) FindMgmtAccounts(profile string, version string, wg *sync.WaitGroup, semaphore chan struct{}, ...)

+ func (m *OrgModule) IsCallerAccountPartOfAnOrg() bool

+ func (m *OrgModule) IsManagementAccount(Organization *types.Organization, account string) bool

+ func (m *OrgModule) PrintOrgAccounts(outputFormat string, outputDirectory string, verbosity int)

+ func (m *OrgModule) ProcessMultipleAccounts(AWSProfiles []string, version string)

+ func (m *OrgModule) Receiver(receiver chan Account, receiverDone chan bool)

type PermissionsRow

+ Condition string

+ type Project struct

+ Admin string

+ Arn string

+ CanPrivEsc string

+ Name string

+ Region string

+ Role string

type Repository

+ Policy policy.Policy

+ PolicyJSON string

+ type Resource2 struct

+ ARN string

+ AccountID string

+ Interesting string

+ Name string

+ Policy policy.Policy

+ PolicyJSON string

+ Public string

+ Region string

+ ResourcePolicySummary string

+ type ResourceTrustsModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CloudFoxVersion string

+ CommandCounter internal.CommandCounter

+ Goroutines int

+ Resources2 []Resource2

+ WrapTable bool

+ func (m *ResourceTrustsModule) PrintResources(outputFormat string, outputDirectory string, verbosity int)

+ func (m *ResourceTrustsModule) Receiver(receiver chan Resource2, receiverDone chan bool)

+ type SNSClientInterface interface

+ GetTopicAttributes func(ctx context.Context, params *sns.GetTopicAttributesInput, ...) (*sns.GetTopicAttributesOutput, error)

+ ListTopics func(ctx context.Context, params *sns.ListTopicsInput, optFns ...func(*sns.Options)) (*sns.ListTopicsOutput, error)

type SNSModule

+ func InitCloudFoxSNSClient(caller sts.GetCallerIdentityOutput, AWSProfile string, cfVersion string, ...) SNSModule

type SQSModule

+ func InitSQSClient(caller sts.GetCallerIdentityOutput, AWSProfile string, cfVersion string, ...) SQSModule

v1.10.3

Apr 4, 2023

v1.10.2

Mar 27, 2023

v1.10.1

Mar 13, 2023

v1.10.0

Feb 28, 2023

Changes in this version

+ var IPv4_BANNER string = ...

+ var IPv6_BANNER string = ...

+ var TCP_4_SCAN string = "sudo nmap -Pn -sV"

+ var TCP_6_SCAN string = "sudo nmap -6 -Pn -sV"

+ var UDP_4_SCAN string = "sudo nmap -Pn -sU -sV"

+ var UDP_6_SCAN string = "sudo nmap -6 -Pn -sU -sV"

+ type AWSS3Client interface

+ GetBucketLocation func(ctx context.Context, params *s3.GetBucketLocationInput, ...) (*s3.GetBucketLocationOutput, error)

+ GetBucketPolicy func(ctx context.Context, params *s3.GetBucketPolicyInput, ...) (*s3.GetBucketPolicyOutput, error)

+ GetPublicAccessBlock func(ctx context.Context, params *s3.GetPublicAccessBlockInput, ...) (*s3.GetPublicAccessBlockOutput, error)

+ ListBuckets func(ctx context.Context, params *s3.ListBucketsInput, optFns ...func(*s3.Options)) (*s3.ListBucketsOutput, error)

+ type AWSSNSClient interface

+ GetTopicAttributes func(ctx context.Context, params *sns.GetTopicAttributesInput, ...) (*sns.GetTopicAttributesOutput, error)

+ ListTopics func(ctx context.Context, params *sns.ListTopicsInput, optFns ...func(*sns.Options)) (*sns.ListTopicsOutput, error)

+ type AWSSQSClient interface

+ GetQueueAttributes func(ctx context.Context, params *sqs.GetQueueAttributesInput, ...) (*sqs.GetQueueAttributesOutput, error)

+ ListQueues func(ctx context.Context, params *sqs.ListQueuesInput, optFns ...func(*sqs.Options)) (*sqs.ListQueuesOutput, error)

type Bucket

+ Access string

+ Actions string

+ Arn string

+ ConditionText string

+ IsConditionallyPublic string

+ IsPublic string

+ Policy policy.Policy

+ PolicyJSON string

+ ResourcePolicySummary string

+ Statement string

+ type NaclRule struct

+ Action bool

+ Cidr string

+ PortRange []int32

+ Protocol string

+ RuleNumber int32

+ type NetworkAcl struct

+ ID string

+ Subnets []string

+ VpcId string

+ func (l *NetworkAcl) Insert(rule NaclRule)

+ type NetworkPortsModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter internal.CommandCounter

+ EC2Client *ec2.Client

+ ECSClient *ecs.Client

+ EFSClient *efs.Client

+ ELBv2Client *elasticloadbalancingv2.Client

+ ElastiCacheClient *elasticache.Client

+ Goroutines int

+ IPv4_Private []NetworkService

+ IPv4_Public []NetworkService

+ IPv6 []NetworkService

+ LightsailClient *lightsail.Client

+ OutputFormat string

+ RDSClient *rds.Client

+ Verbosity int

+ WrapTable bool

+ func (m *NetworkPortsModule) Evaluate(l *NetworkAcl, port int32, proto string) (bool, *NaclRule)

+ func (m *NetworkPortsModule) PrintNetworkPorts(outputFormat string, outputDirectory string)

+ func (m *NetworkPortsModule) Receiver(receiver chan NetworkServices, receiverDone chan bool)

+ type NetworkService struct

+ AWSService string

+ Hosts []string

+ Ports []string

+ Protocol string

+ Region string

+ type NetworkServices struct

+ IPv4_Private []NetworkService

+ IPv4_Public []NetworkService

+ IPv6 []NetworkService

+ type Queue struct

+ Access string

+ Actions string

+ Arn string

+ ConditionText string

+ IsConditionallyPublic string

+ IsPublic string

+ Name string

+ Policy policy.Policy

+ PolicyJSON string

+ Region string

+ ResourcePolicySummary string

+ Statement string

+ URL string

+ type SNSModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter internal.CommandCounter

+ Goroutines int

+ OutputFormat string

+ SNSClient AWSSNSClient

+ StorePolicies bool

+ Topics []SNSTopic

+ WrapTable bool

+ func (m *SNSModule) PrintSNS(outputFormat string, outputDirectory string, verbosity int)

+ func (m *SNSModule) Receiver(receiver chan SNSTopic, receiverDone chan bool)

+ type SNSTopic struct

+ ARN string

+ Access string

+ Actions string

+ ConditionText string

+ IsConditionallyPublic string

+ IsPublic string

+ Name string

+ Policy policy.Policy

+ PolicyJSON string

+ Region string

+ ResourcePolicySummary string

+ Statement string

+ type SQSModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter internal.CommandCounter

+ Goroutines int

+ OutputFormat string

+ Queues []Queue

+ SQSClient AWSSQSClient

+ StorePolicies bool

+ WrapTable bool

+ func (m *SQSModule) PrintSQS(outputFormat string, outputDirectory string, verbosity int)

+ func (m *SQSModule) Receiver(receiver chan Queue, receiverDone chan bool)

+ type SecurityGroup struct

+ ID string

+ Rules []SecurityGroupRule

+ VpcId string

+ type SecurityGroupRule struct

+ Cidr []string

+ Ports []int32

+ Protocol string

type StatementEntry

+ NotAction ListOfItems

+ type TagsGetResourcesAPI interface

+ GetResources func(ctx context.Context, params *resourcegroupstaggingapi.GetResourcesInput, ...) (*resourcegroupstaggingapi.GetResourcesOutput, error)

type TagsModule

+ MaxResourcesPerRegion int

+ ResourceGroupsTaggingApiInterface TagsGetResourcesAPI

v1.9.1

Jan 20, 2023

v1.9.0

Jan 10, 2023

Changes in this version

+ func EnvVarsContains(element EnvironmentVariable, array []EnvironmentVariable) bool

+ func GetIamSimResult(SkipAdminCheck bool, roleArnPtr *string, iamSimulatorMod IamSimulatorModule, ...) (string, string)

+ func GetPmapperResults(SkipAdminCheck bool, pmapperMod PmapperModule, roleArn *string) (string, string)

type AccessKeysModule

+ WrapTable bool

type AnalyzedRole

+ Admin string

+ CanPrivEsc string

+ type AttachedPolicies struct

+ Arn string

+ Name string

type BucketsModule

+ S3ClientListBucketsInterface S3ListBucketsAPI

+ WrapTable bool

+ type CloudFormationGetTemplateAPIClient interface

+ GetTemplate func(context.Context, *cloudformation.GetTemplateInput, ...) (*cloudformation.GetTemplateOutput, error)

type CloudformationModule

+ CloudFormationDescribeStacksInterface cloudformation.DescribeStacksAPIClient

+ CloudFormationGetTemplateInterface CloudFormationGetTemplateAPIClient

+ WrapTable bool

+ type Cluster struct

+ AWSService string

+ Admin string

+ CanPrivEsc string

+ Endpoint string

+ Name string

+ NodeGroup string

+ OIDC string

+ Public string

+ Region string

+ Role string

+ type DescribeTasksDefinitionAPIClient interface

+ DescribeTaskDefinition func(context.Context, *ecs.DescribeTaskDefinitionInput, ...func(*ecs.Options)) (*ecs.DescribeTaskDefinitionOutput, error)

type ECRModule

+ ECRClientDescribeImagesInterface ecr.DescribeImagesAPIClient

+ ECRClientDescribeReposInterface ecr.DescribeRepositoriesAPIClient

+ WrapTable bool

+ type ECSTasksModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter internal.CommandCounter

+ DescribeNetworkInterfacesClient ec2.DescribeNetworkInterfacesAPIClient

+ DescribeTaskDefinitionClient DescribeTasksDefinitionAPIClient

+ DescribeTasksClient ecs.DescribeTasksAPIClient

+ Goroutines int

+ IAMSimulatePrincipalPolicyClient iam.SimulatePrincipalPolicyAPIClient

+ ListClustersClient ecs.ListClustersAPIClient

+ ListTasksClient ecs.ListTasksAPIClient

+ MappedECSTasks []MappedECSTask

+ OutputFormat string

+ SkipAdminCheck bool

+ WrapTable bool

+ func (m *ECSTasksModule) ECSTasks(outputFormat string, outputDirectory string, verbosity int)

+ func (m *ECSTasksModule) Receiver(receiver chan MappedECSTask, receiverDone chan bool)

+ type EKSModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ Clusters []Cluster

+ CommandCounter internal.CommandCounter

+ EKSClientDescribeClusterInterface eks.DescribeClusterAPIClient

+ EKSClientDescribeNodeGroupInterface eks.DescribeNodegroupAPIClient

+ EKSClientListClustersInterface eks.ListClustersAPIClient

+ EKSClientListNodeGroupsInterface eks.ListNodegroupsAPIClient

+ Goroutines int

+ IAMSimulatePrincipalPolicyClient iam.SimulatePrincipalPolicyAPIClient

+ OutputFormat string

+ SkipAdminCheck bool

+ WrapTable bool

+ func (m *EKSModule) EKS(outputFormat string, outputDirectory string, verbosity int)

+ func (m *EKSModule) Receiver(receiver chan Cluster, receiverDone chan bool)

+ type Edge struct

+ Destination string

+ Reason string

+ ShortReason string

+ Source string

+ type ElasticNetworkInterfacesModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter internal.CommandCounter

+ DescribeNetworkInterfacesClient ec2.DescribeNetworkInterfacesAPIClient

+ MappedENIs []MappedENI

+ OutputFormat string

+ WrapTable bool

+ func (m *ElasticNetworkInterfacesModule) ElasticNetworkInterfaces(outputFormat string, outputDirectory string, verbosity int)

+ func (m *ElasticNetworkInterfacesModule) Receiver(receiver chan MappedENI, receiverDone chan bool)

type EndpointsModule

+ WrapTable bool

type EnvsModule

+ WrapTable bool

type FilesystemsModule

+ WrapTable bool

type IamPermissionsModule

+ WrapTable bool

type IamPrincipalsModule

+ WrapTable bool

type IamSimulatorModule

+ IAMListRolesClient iam.ListRolesAPIClient

+ IAMListUsersClient iam.ListUsersAPIClient

+ IAMSimulatePrincipalPolicyClient iam.SimulatePrincipalPolicyAPIClient

+ WrapTable bool

type InstancesModule

+ IAMListInstanceProfilesClient iam.ListInstanceProfilesAPIClient

+ IAMSimulatePrincipalPolicyClient iam.SimulatePrincipalPolicyAPIClient

+ SkipAdminCheck bool

+ WrapTable bool

type Inventory2Module

+ WrapTable bool

type Lambda

+ CanPrivEsc string

type LambdasModule

+ IAMSimulatePrincipalPolicyClient iam.SimulatePrincipalPolicyAPIClient

+ SkipAdminCheck bool

+ WrapTable bool

+ type MappedECSTask struct

+ Admin string

+ CanPrivEsc string

+ Cluster string

+ ExternalIP string

+ ID string

+ LaunchType string

+ PrivateIP string

+ Role string

+ TaskDefinition string

+ type MappedENI struct

+ AttachedInstance string

+ Description string

+ ExternalIP string

+ ID string

+ PrivateIP string

+ Type string

+ VPCID string

type MappedInstance

+ CanPrivEsc string

+ type Node struct

+ AccessKeys int

+ ActivePassword bool

+ Arn string

+ AttachedPolicies []AttachedPolicies

+ GroupMemberships []interface{}

+ HasMfa bool

+ IDValue string

+ InstanceProfile interface{}

+ IsAdmin bool

+ PathToAdmin bool

+ PermissionsBoundary interface{}

+ Tags Tags

+ TrustPolicy interface{}

type OutboundAssumedRolesModule

+ WrapTable bool

+ type PmapperModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter internal.CommandCounter

+ Edges []Edge

+ Goroutines int

+ Nodes []Node

+ OutputFormat string

+ WrapTable bool

+ func (m *PmapperModule) DoesPrincipalHaveAdmin(principal string) bool

+ func (m *PmapperModule) DoesPrincipalHavePathToAdmin(principal string) bool

+ func (m *PmapperModule) PrintPmapperData(outputFormat string, outputDirectory string, verbosity int)

type RAMModule

+ WrapTable bool

+ type RoleTrustStatementEntry struct

+ Action string

+ Condition struct{ ... }

+ Effect string

+ Principal struct{ ... }

+ Sid string

type RoleTrustsModule

+ IAMClientListRoles iam.ListRolesAPIClient

+ IAMSimulatePrincipalPolicyClient iam.SimulatePrincipalPolicyAPIClient

+ SkipAdminCheck bool

+ WrapTable bool

type Route53Module

+ WrapTable bool

+ type S3ListBucketsAPI interface

+ ListBuckets func(ctx context.Context, params *s3.ListBucketsInput, optFns ...func(*s3.Options)) (*s3.ListBucketsOutput, error)

type SecretsModule

+ WrapTable bool

+ type Tags struct

type TagsModule

+ WrapTable bool

v1.8.1

Oct 19, 2022

v1.8.0

Oct 19, 2022

Changes in this version

+ var TxtLogger = utils.TxtLogger()

+ type CFStack struct

+ AWSService string

+ Name string

+ Outputs []types.Output

+ Parameters []types.Parameter

+ Region string

+ Role string

+ Template string

+ type CloudformationModule struct

+ AWSProfile string

+ AWSRegions []string

+ CFStacks []CFStack

+ Caller sts.GetCallerIdentityOutput

+ CloudFormationClient *cloudformation.Client

+ CommandCounter console.CommandCounter

+ Goroutines int

+ OutputFormat string

+ func (m *CloudformationModule) PrintCloudformationStacks(outputFormat string, outputDirectory string, verbosity int)

+ func (m *CloudformationModule) Receiver(receiver chan CFStack, receiverDone chan bool)

type InstancesModule

+ IAMClient *iam.Client

+ InstanceProfileToRolesMap map[string][]iamTypes.Role

+ type Lambda struct

+ AWSService string

+ Admin string

+ Name string

+ Public string

+ Region string

+ Role string

+ Type string

+ type LambdasModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter console.CommandCounter

+ Goroutines int

+ IAMClient *iam.Client

+ LambdaClient *lambda.Client

+ Lambdas []Lambda

+ OutputFormat string

+ func (m *LambdasModule) PrintLambdas(outputFormat string, outputDirectory string, verbosity int)

+ func (m *LambdasModule) Receiver(receiver chan Lambda, receiverDone chan bool)

type MappedInstance

+ Admin string

+ Role string

type Resource

+ ShareType string

+ Type string

+ type Tag struct

+ AWSService string

+ Arn string

+ Key string

+ Name string

+ Region string

+ Type string

+ Value string

+ type TagsModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter console.CommandCounter

+ Goroutines int

+ OutputFormat string

+ ResourceGroupsTaggingApiClient *resourcegroupstaggingapi.Client

+ ResourceTypeCounts map[string]int

+ Tags []Tag

+ func (m *TagsModule) PrintTags(outputFormat string, outputDirectory string, verbosity int)

+ func (m *TagsModule) Receiver(receiver chan Tag, receiverDone chan bool)

v1.7.2

Oct 16, 2022

v1.7.1

Sep 23, 2022

Changes in this version

type AccessKeysModule

+ Goroutines int

type BucketsModule

+ Goroutines int

type ECRModule

+ Goroutines int

type EndpointsModule

+ Goroutines int

type EnvsModule

+ Goroutines int

type FilesystemsModule

+ Goroutines int

type IamPermissionsModule

+ Goroutines int

type IamPrincipalsModule

+ Goroutines int

type IamSimulatorModule

+ Goroutines int

type InstancesModule

+ Goroutines int

type Inventory2Module

+ DynamoDBClient *dynamodb.Client

+ GlueClient *glue.Client

+ Goroutines int

+ SNSClient *sns.Client

+ SQSClient *sqs.Client

type OutboundAssumedRolesModule

+ Goroutines int

type RAMModule

+ Goroutines int

type RoleTrustsModule

+ Goroutines int

type Route53Module

+ Goroutines int

type SecretsModule

+ Goroutines int

v1.7.0

Sep 12, 2022

v1.6.0

Sep 8, 2022

Changes in this version

+ type AccessKeysModule struct

+ AWSProfile string

+ AnalyzedUsers []UserKeys

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter console.CommandCounter

+ IAMClient *iam.Client

+ OutputFormat string

+ func (m *AccessKeysModule) PrintAccessKeys(filter string, outputFormat string, outputDirectory string, verbosity int)

+ type AnalyzedRole struct

+ type Bucket struct

+ AWSService string

+ Name string

+ Region string

+ type BucketsModule struct

+ AWSProfile string

+ AWSRegions []string

+ Buckets []Bucket

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter console.CommandCounter

+ OutputFormat string

+ S3Client *s3.Client

+ func (m *BucketsModule) PrintBuckets(outputFormat string, outputDirectory string, verbosity int)

+ func (m *BucketsModule) Receiver(receiver chan Bucket, receiverDone chan bool)

+ type CloudTrailEvent struct

+ AwsRegion string

+ EventCategory string

+ EventID string

+ EventName string

+ EventSource string

+ EventTime time.Time

+ EventType string

+ EventVersion string

+ ManagementEvent bool

+ ReadOnly bool

+ RecipientAccountID string

+ RequestID string

+ RequestParameters struct{ ... }

+ Resources []struct{ ... }

+ ResponseElements struct{ ... }

+ SourceIPAddress string

+ TLSDetails struct{ ... }

+ UserAgent string

+ UserIdentity struct{ ... }

+ type ECRModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter console.CommandCounter

+ ECRClient *ecr.Client

+ OutputFormat string

+ Repositories []Repository

+ func (m *ECRModule) PrintECR(outputFormat string, outputDirectory string, verbosity int)

+ func (m *ECRModule) Receiver(receiver chan Repository, receiverDone chan bool)

+ type Endpoint struct

+ AWSService string

+ Endpoint string

+ Name string

+ Port int32

+ Protocol string

+ Public string

+ Region string

+ type EndpointsModule struct

+ APIGatewayClient *apigateway.Client

+ APIGatewayv2Client *apigatewayv2.Client

+ AWSProfile string

+ AWSRegions []string

+ AppRunnerClient *apprunner.Client

+ Caller sts.GetCallerIdentityOutput

+ CloudfrontClient *cloudfront.Client

+ CommandCounter console.CommandCounter

+ EKSClient *eks.Client

+ ELBClient *elasticloadbalancing.Client

+ ELBv2Client *elasticloadbalancingv2.Client

+ Endpoints []Endpoint

+ Errors []string

+ GrafanaClient *grafana.Client

+ LambdaClient *lambda.Client

+ LightsailClient *lightsail.Client

+ MQClient *mq.Client

+ OpenSearchClient *opensearch.Client

+ OutputFormat string

+ RDSClient *rds.Client

+ RedshiftClient *redshift.Client

+ S3Client *s3.Client

+ func (m *EndpointsModule) PrintEndpoints(outputFormat string, outputDirectory string, verbosity int)

+ func (m *EndpointsModule) Receiver(receiver chan Endpoint, receiverDone chan bool)

+ type EnvironmentVariable struct

+ type EnvsModule struct

+ AWSProfile string

+ AWSRegions []string

+ AppRunnerClient *apprunner.Client

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter console.CommandCounter

+ ECSClient *ecs.Client

+ EnvironmentVariables []EnvironmentVariable

+ LambdaClient *lambda.Client

+ LightsailClient *lightsail.Client

+ OutputFormat string

+ SagemakerClient *sagemaker.Client

+ func (m *EnvsModule) PrintEnvs(outputFormat string, outputDirectory string, verbosity int)

+ func (m *EnvsModule) Receiver(receiver chan EnvironmentVariable, receiverDone chan bool)

+ type FilesystemObject struct

+ AWSService string

+ DnsName string

+ IP string

+ MountTarget string

+ Name string

+ Policy string

+ Region string

+ type FilesystemsModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter console.CommandCounter

+ EFSClient *efs.Client

+ FSxClient *fsx.Client

+ Filesystems []FilesystemObject

+ OutputFormat string

+ Regions [30]FilesystemObject

+ func (m *FilesystemsModule) PrintFilesystems(outputFormat string, outputDirectory string, verbosity int)

+ func (m *FilesystemsModule) Receiver(receiver chan FilesystemObject, receiverDone chan bool)

+ type GAADGroup struct

+ Arn string

+ AttachedPolicies []types.AttachedPolicy

+ InlinePolicies []types.PolicyDetail

+ Name string

+ type GAADPolicy struct

+ Arn string

+ Name string

+ PolicyVersionList []types.PolicyVersion

+ type GAADRole struct

+ Arn string

+ AttachedPolicies []types.AttachedPolicy

+ InlinePolicies []types.PolicyDetail

+ Name string

+ type GAADUser struct

+ Arn string

+ AttachedPolicies []types.AttachedPolicy

+ GroupList []string

+ InlinePolicies []types.PolicyDetail

+ Name string

+ type GlobalResourceCount2 struct

+ type Group struct

+ AWSService string

+ Arn string

+ AttachedPolicies []string

+ AttachedUsers []string

+ InlinePolicies []string

+ Name string

+ Type string

+ type IamPermissionsModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter console.CommandCounter

+ Groups []GAADGroup

+ IAMClient *iam.Client

+ OutputFormat string

+ Policies []GAADPolicy

+ Roles []GAADRole

+ Rows []PermissionsRow

+ Users []GAADUser

+ func (m *IamPermissionsModule) PrintIamPermissions(outputFormat string, outputDirectory string, verbosity int, principal string)

+ type IamPrincipalsModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter console.CommandCounter

+ Groups []Group

+ IAMClient *iam.Client

+ OutputFormat string

+ Roles []Role

+ Users []User

+ func (m *IamPrincipalsModule) PrintIamPrincipals(outputFormat string, outputDirectory string, verbosity int)

+ type IamSimulatorModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter console.CommandCounter

+ IAMClient *iam.Client

+ OutputFormat string

+ SimulatorResults []SimulatorResult

+ func (m *IamSimulatorModule) PrintIamSimulator(principal string, action string, resource string, outputFormat string, ...)

+ func (m *IamSimulatorModule) Receiver(receiver chan SimulatorResult, receiverDone chan bool)

+ type InstancesModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter console.CommandCounter

+ EC2Client *ec2.Client

+ MappedInstances []MappedInstance

+ OutputFormat string

+ UserDataAttributesOnly bool

+ func (m *InstancesModule) Instances(filter string, outputFormat string, outputDirectory string, verbosity int)

+ func (m *InstancesModule) Receiver(receiver chan MappedInstance, receiverDone chan bool)

+ type Inventory2Module struct

+ APIGatewayClient *apigateway.Client

+ APIGatewayv2Client *apigatewayv2.Client

+ AWSProfile string

+ AWSRegions []string

+ AppRunnerClient *apprunner.Client

+ Caller sts.GetCallerIdentityOutput

+ CloudFormationClient *cloudformation.Client

+ CloudfrontClient *cloudfront.Client

+ CommandCounter console.CommandCounter

+ EC2Client *ec2.Client

+ ECSClient *ecs.Client

+ EKSClient *eks.Client

+ ELBClient *elasticloadbalancing.Client

+ ELBv2Client *elasticloadbalancingv2.Client

+ GlobalResourceCounts []GlobalResourceCount2

+ GrafanaClient *grafana.Client

+ IAMClient *iam.Client

+ LambdaClient *lambda.Client

+ LightsailClient *lightsail.Client

+ MQClient *mq.Client

+ OpenSearchClient *opensearch.Client

+ OutputFormat string

+ RDSClient *rds.Client

+ RedshiftClient *redshift.Client

+ RegionResourceCount int

+ S3Client *s3.Client

+ SSMClient *ssm.Client

+ SecretsManagerClient *secretsmanager.Client

+ func (m *Inventory2Module) PrintGlobalResources(outputFormat string, outputDirectory string, verbosity int, ...)

+ func (m *Inventory2Module) PrintInventoryPerRegion(outputFormat string, outputDirectory string, verbosity int)

+ func (m *Inventory2Module) PrintTotalResources(outputFormat string)

+ func (m *Inventory2Module) Receiver(receiver chan GlobalResourceCount2, receiverDone chan bool)

+ type ListOfItems []string

+ func (r *ListOfItems) UnmarshalJSON(b []byte) error

+ type ListOfPrincipals []string

+ func (r *ListOfPrincipals) UnmarshalJSON(b []byte) error

+ type MappedInstance struct

+ Arn string

+ AvailabilityZone string

+ ExternalIP string

+ ID string

+ Name string

+ PrivateIP string

+ Profile string

+ Region string

+ State string

+ type OutboundAssumeRoleEntry struct

+ AWSService string

+ DestinationAccount string

+ DestinationPrincipal string

+ LogTimestamp string

+ Region string

+ SourceAccount string

+ SourcePrincipal string

+ Type string

+ type OutboundAssumedRolesModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CloudTrailClient *cloudtrail.Client

+ CommandCounter console.CommandCounter

+ Days int

+ OutboundAssumeRoleEntries []OutboundAssumeRoleEntry

+ OutputFormat string

+ func (m *OutboundAssumedRolesModule) PrintOutboundRoleTrusts(days int, outputFormat string, outputDirectory string, verbosity int)

+ func (m *OutboundAssumedRolesModule) Receiver(receiver chan OutboundAssumeRoleEntry, receiverDone chan bool)

+ type PermissionsRow struct

+ AWSService string

+ Action string

+ Arn string

+ Effect string

+ Name string

+ PolicyName string

+ PolicyType string

+ Resource string

+ Type string

+ type RAMModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter console.CommandCounter

+ OutputFormat string

+ RAMClient *ram.Client

+ Resources []Resource

+ func (m *RAMModule) PrintRAM(outputFormat string, outputDirectory string, verbosity int)

+ func (m *RAMModule) Receiver(receiver chan Resource, receiverDone chan bool)

+ type Record struct

+ AWSService string

+ Name string

+ PrivateZone string

+ Type string

+ Value string

+ type Repository struct

+ AWSService string

+ ImageSize int64

+ ImageTags string

+ Name string

+ PushedAt string

+ Region string

+ URI string

+ type Resource struct

+ AWSService string

+ Name string

+ Owner string

+ Region string

+ type Role struct

+ AWSService string

+ Arn string

+ AttachedPolicies []string

+ InlinePolicies []string

+ Name string

+ Type string

+ type RoleTrustsModule struct

+ AWSProfile string

+ AnalyzedRoles []AnalyzedRole

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter console.CommandCounter

+ IAMClient iam.ListRolesAPIClient

+ func (m *RoleTrustsModule) PrintRoleTrusts(outputFormat string, outputDirectory string, verbosity int)

+ type Route53Module struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter console.CommandCounter

+ OutputFormat string

+ Records []Record

+ Route53Client *route53.Client

+ func (m *Route53Module) PrintRoute53(outputFormat string, outputDirectory string, verbosity int)

+ type Secret struct

+ AWSService string

+ Description string

+ Name string

+ Region string

+ type SecretsModule struct

+ AWSProfile string

+ AWSRegions []string

+ Caller sts.GetCallerIdentityOutput

+ CommandCounter console.CommandCounter

+ SSMClient *ssm.Client

+ Secrets []Secret

+ SecretsManagerClient *secretsmanager.Client

+ func (m *SecretsModule) PrintSecrets(outputFormat string, outputDirectory string, verbosity int)

+ func (m *SecretsModule) Receiver(receiver chan Secret, receiverDone chan bool)

+ type SimulatorResult struct

+ AWSService string

+ Decision string

+ Principal string

+ Query string

+ type StatementEntry struct

+ Action ListOfItems

+ Condition ListOfItems

+ Effect string

+ Resource ListOfItems

+ type User struct

+ AWSService string

+ Arn string

+ AttachedPolicies []string

+ InlinePolicies []string

+ Name string

+ Type string

+ type UserKeys struct

+ Key string

+ Username string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL