aws_public_ips is a tool to fetch all public IP addresses (both IPv4/IPv6) associated with an AWS account. It can be used as a library and as a CLI, and supports the following AWS services (all with both Classic & VPC flavors): * APIGateway * CloudFront * EC2 (and as a result: ECS, EKS, Beanstalk, Fargate, Batch, & NAT Instances) * ElasticSearch * ELB (Classic ELB) * ELBv2 (ALB/NLB) * Lightsail * RDS * Redshift If a service isn't listed (S3, ElastiCache, etc) it's most likely because it doesn't have anything to support (i.e. it might not be deployable publicly, it might have all ip addresses resolve to global AWS infrastructure, etc). Quick start: Install the gem and run it: $ gem install aws_public_ips # Uses default ~/.aws/credentials $ aws_public_ips 52.84.11.13 52.84.11.83 2600:9000:2039:ba00:1a:cd27:1440:93a1 2600:9000:2039:6e00:1a:cd27:1440:93a1 # With a custom profile $ AWS_PROFILE=production aws_public_ips 52.84.11.159 The gem can also be run from Docker: $ docker pull arkadiyt/aws_public_ips # For credentials, ensure the appropriate environment variables are set.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A framework to analyze container images and gather useful information.
Kube-bench is a tool for checking Kubernetes security based on CIS Kubernetes Benchmark.
Automated script for creating a vulnerable Azure cloud lab to train offensive security skills.
Open-source project for detecting security risks in cloud infrastructure accounts with support for AWS, Azure, GCP, OCI, and GitHub.
A collection of security workshops and hands-on content for AWS security services and techniques
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
Cloud Security Suite (cs-suite) - Version 3.0 Usage for cloud security audits on AWS, GCP, Azure, and DigitalOcean.
S3Scanner scans for misconfigured S3 buckets across S3-compatible APIs, identifying potential security vulnerabilities and data exposure risks.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.