aws_public_ips is a Ruby-based tool designed to enumerate and fetch all public IP addresses (both IPv4 and IPv6) associated with an AWS account. The tool functions as both a command-line interface and a library that can be integrated into other applications. The tool supports discovery of public IP addresses across multiple AWS services including: - API Gateway - CloudFront distributions - EC2 instances (which extends to ECS, EKS, Elastic Beanstalk, Fargate, Batch, and NAT instances) - Elasticsearch clusters - Classic Elastic Load Balancers (ELB) - Application and Network Load Balancers (ELBv2/ALB/NLB) - Lightsail instances - RDS database instances - Redshift clusters The tool works with both Classic and VPC deployment models across supported services. It integrates with AWS credentials through standard AWS credential mechanisms, including support for custom AWS profiles and environment variables. Installation is available through Ruby gems, and the tool can also be executed via Docker containers. The tool outputs discovered IP addresses in a simple list format, making it suitable for integration with other security tools and scripts for asset inventory and attack surface management purposes.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
KICS is an open-source Infrastructure as Code security scanner that detects vulnerabilities and misconfigurations through customizable queries and integrates with CI/CD pipelines.
A setuid implementation of user namespaces that enables running unprivileged containers without root privileges as a secure alternative to traditional container runtimes.
A framework for analyzing container images, running scripts inside containers, and gathering information for static analysis and policy enforcement.
Cloudmarker is a configurable cloud monitoring tool and framework that audits Azure and GCP environments by retrieving, analyzing, and alerting on cloud security data.
AWS Vault securely stores AWS IAM credentials in the operating system's keystore and generates temporary credentials for development environments.
TerraGoat is a deliberately vulnerable Terraform repository that demonstrates common cloud infrastructure misconfigurations for training and testing security tools.
FestIn discovers open S3 buckets associated with a domain using crawling and DNS reconnaissance techniques.
LambdaGuard is an AWS Lambda auditing tool that provides security configuration checks, statistical analysis, and service dependency mapping for serverless functions.
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.