Perimeterator Logo

Perimeterator

0
Free
Visit Website

Perimeterator is a small project intended to allow for continuous auditing of internet facing AWS services. It can be quickly deployed into AWS and will periodically enumerate internet-facing IP addresses for a number of commonly misconfigured AWS resources. The results from this enumeration process are pushed into a work queue for scanning by external scanner 'workers' in order to locate open network services. Scanner 'workers' can be deployed anywhere, and are intended to be deployed into non-trusted networks in order to provide a representation of access to services from the "general internet". Currently, the following AWS resource types are supported: EC2 ELB ELBv2 RDS ES All communication between Perimeterator components occurs asynchronously through the use of AWS SQS queues. Demo Getting Started / Deployment Perimeterator requires a few components in order to function. However, in order to make getting started as easy as possible, a number of Terraform configs have been provided inside of the terraform/ directory. To get started, please see the terraform/README.md file. Components Perimeterator has a number of components, due to its distributed nature. A brief overview of each component is provided below: * Scanner: Responsible for scanning IP addresses for open network services. * Worker: Responsible for processing work items from the SQS queue. * SQS Queue: Used to communicate between components.

FEATURES

ALTERNATIVES

A cloud-based security platform providing WAAP, ZTNA, public cloud security management, and threat intelligence sharing capabilities.

Commercial

A command-line tool to get valuable information out of AWS CloudTrail and a general purpose toolbox for working with IAM policies

Show the history and changes between configuration versions of AWS resources

Monitors AWS and GCP accounts for policy changes and alerts on insecure configurations, with support for OpenStack and GitHub monitoring.

Grype is a vulnerability scanner for container images and filesystems that scans for known vulnerabilities and supports various image formats.

Tool for assessing compliance and running vulnerability scans on Docker images.

A Python script to test the security of AWS S3 buckets

A workload policy enforcement tool for Kubernetes with various supported policies and configuration options.

PINNED