Access Undenied on AWS
Access Undenied parses AWS AccessDenied CloudTrail events, explains the reasons for them, and offers actionable fixes. Overview Common use cases Simple Startup Installation - Installation from pip - Installation from source code (development) Usage - Getting events - Permissions - Same account assets only, no SCPs - Cross-account assets and SCPs CLI Commands - Analyze - Get SCPs Output Format Output Fields - AccessDeniedReason: ResultDetails - PoliciesToAdd - ExplicitDenyPolicies Acknowledgements Appendices - Running AccessUndenied from a Lambda function - Setting up a venv - Getting CloudTrail events via the LookupEvents API with the CLI - Getting Cloudtrail events from the AWS Console's event history Example Cloudtrail event Least privilege AccessUndenied policy Overview Access Undenied analyzes AWS CloudTrail AccessDenied events, scans the environment to identify and explain the reasons for them, and offers actionable least-privilege remediation suggestions. Common use cases Sometimes, the new and more detailed AccessDenied messages provided by AWS will be sufficient. However, that is not always the case. Some AccessDenied messages do not provide details. Among the serv
FEATURES
ALTERNATIVES
A framework to analyze container images and gather useful information.
A fully managed service that securely stores, rotates, and manages sensitive data such as database credentials and API keys.
An open-sourced framework for managing resources across hundreds of AWS Accounts
AWS Scout2 is a security tool for AWS administrators to assess their environment's security posture.
A collection of tools for forensics teams to collect evidence from cloud platforms
gVisor is an application kernel that provides isolation for running sandboxed containers.
Open-source tool for analyzing AWS temporary tokens to detect malicious activity.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.