Cloudsplaining on HackerShow

Security and privacy

cloud iam security assessment

SHOW HN2020

An AWS IAM Security Assessment Tool

Shown by kmcquade on May 5, 2020. Click the card to turn it over.

6points

6comments

#2,758of 3,028 in 2020

Top 92%of 2020 by points

How HN took it

QuietFewer than 5 comments about the project

1 positive, 2 neutral or asking, 0 mixed, 0 critical, out of 3 comments about the project.

Docs: 1 for, 0 against

Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.

positive neutral or mixed critical about another commenter or something else the maker

Report guidance is good and useful for assessments
From 1 comment
- Damn. The report guidance is really good. I'm going to use this in an assessment next week :) Have to review an account that has hundreds of IAM roles but this should help a lot,.
  fred1991 on HN
Faster at creating a comprehensive report than PMapper
From 1 comment
- PMapper is definitely a great tool. It’s best used in Pentests for validating some privilege escalation paths. It has the benefit of analyzing IAM trust policies, resource based…
  kmcquade on HN

Documentation lacks required privileges to run it
From 1 comment
- What kind of privileges do I need to run it? I don’t see any details in the documentation. You should probably add this there.
  chmod-noobs on HN

How does it differ from PMapper
From 1 comment
- Cool project. How is this different from PMapper though? I use that it some of my assessments (underrated tool IMHO).
  chmod-noobs on HN
What privileges are needed to run it
From 1 comment
- What kind of privileges do I need to run it? I don’t see any details in the documentation. You should probably add this there.
  chmod-noobs on HN

PMapper
From 1 comment
- Cool project. How is this different from PMapper though? I use that it some of my assessments (underrated tool IMHO).
  chmod-noobs on HN