Skip to content

Home

Jump to bottom
Vincent Fortin edited this page Feb 6, 2019 · 18 revisions

What is Scout Suite?

Scout Suite is a security tool that lets AWS, GCP and Azure administrators assess their environment's security posture. Using the AWS API, Scout Suite gathers configuration data for manual inspection and highlights high-risk areas automatically. Rather than pouring through dozens of pages on the web, Scout Suite supplies a clear view of the attack surface automatically.

Scout Suite was designed by security consultants/auditor. It is meant to provide a point-in-time security-oriented view of the cloud account it was run in. Once the data has been gathered, all usage may be performed offline.

For engineers in order to implement periodic and/or continuous review of their AWS environment, Scout Suite may be used a base framework that provides. TODO TODO.

Basic workflow

Assuming access to the AWS APIs has already been configured on a machine (e.g. you can use the AWS CLI), then installing and using Scout Suite should be trivial:

  1. Install Scout Suite
pip install scoutsuite
  1. Run the tool
Scout(--profile <profile-name>)
  1. Browse the HTML report that is automatically open in the default web browser

Advanced usage

  1. Generate a list of trusted IP ranges
  2. Generate a custom ruleset
  3. Provide Scout Suite with the custom ruleset and trusted IP ranges
Clone this wiki locally