Perimeterator Logo

Perimeterator

0
Free
Visit Website

Perimeterator is a small project intended to allow for continuous auditing of internet facing AWS services. It can be quickly deployed into AWS and will periodically enumerate internet-facing IP addresses for a number of commonly misconfigured AWS resources. The results from this enumeration process are pushed into a work queue for scanning by external scanner 'workers' in order to locate open network services. Scanner 'workers' can be deployed anywhere, and are intended to be deployed into non-trusted networks in order to provide a representation of access to services from the "general internet". Currently, the following AWS resource types are supported: EC2 ELB ELBv2 RDS ES All communication between Perimeterator components occurs asynchronously through the use of AWS SQS queues. Demo Getting Started / Deployment Perimeterator requires a few components in order to function. However, in order to make getting started as easy as possible, a number of Terraform configs have been provided inside of the terraform/ directory. To get started, please see the terraform/README.md file. Components Perimeterator has a number of components, due to its distributed nature. A brief overview of each component is provided below: * Scanner: Responsible for scanning IP addresses for open network services. * Worker: Responsible for processing work items from the SQS queue. * SQS Queue: Used to communicate between components.

FEATURES

ALTERNATIVES

Export Kubernetes events for observability and alerting purposes with flexible routing options.

Cloud security project focusing on discovering and protecting privileged entities in AWS and Azure environments.

A cloud-native application protection platform that provides comprehensive security monitoring, vulnerability management, and threat detection for cloud environments and container workloads.

Commercial

In-depth analysis and insights on various cloud security topics by Rhino Security Labs team

Automatically compile AWS SCPs for compliant AWS services based on preferred frameworks.

Multi-account cloud security tool for AWS with real-time reporting and auto-remediation capabilities.

A multi-threaded AWS security-focused inventory collection tool with comprehensive resource coverage and efficient data collection methods.

An open-sourced framework for managing resources across hundreds of AWS Accounts