CloudMapper is a potent tool crafted for the examination of Amazon Web Services (AWS) environments. Initially developed to produce network diagrams, CloudMapper has since expanded its capabilities to include security audits. Although the network visualization function (command prepare) is no longer actively maintained, the tool is continuously being enhanced with additional features.
Features
- audit: Look for any possible setup errors.
- collect: Collect metadata about an AWS account.
- find_admins: Identify admin users and roles, or principals with specific privileges in IAM policies.
- find_unused: Examine the account for any underutilised resources. (e.g., Security Groups, Elastic IPs, network interfaces, volumes, and elastic load balancers).
- prepare/webserver: Examine the account for any underutilised resources.
- public: Find public hosts and port ranges.
- sg_ips: Get geoip info on CIDRs trusted in Security Groups.
- stats: Show counts of resources for accounts.
- weboftrust: Show Web Of Trust.
- report: Generate HTML report, including a summary of accounts and audit findings.
- iam_report: Generate HTML report for IAM information of an account.
Installation
Run with Demo Data
View the network map at http://127.0.0.1:8000/ and the report at http://127.0.0.1:8000/account-data/report.html.
Screenshots
