gabrielsoltz/metahub v2.0.0

2.0.0: This is a completely new MetaHub!

on GitHub

New beginning: this version of MetaHub has created an entirely new, significantly better product.

Changelog Highlights:

• The Meta Outputs concept was deprecated entirely: There are no more MetaTags, MetaChecks, MetaAccount, and MetaTrail as it was too many different things for doing almost the same, adding complexity to the code and making it more difficult to understand the product.
• The new Context module will handle all those tasks together in a faster way, without code duplication, and much more efficiently.
• The module still executes four main processes: config (which includes associations), tags, account, and cloud trail. This version enables by default config and tags; you can allow the other ones using the option --context.
• All the MetaChecks were migrated with new standardized names: We don't follow any more notations like: is_.... or its_attached_to.....; this was very confusing and added a complexity layer. Now, for configurations, we use the name of the configuration parameter, and for associations, a dictionary for each resource type with the list of resources.
• There is a new Impact module: This module executes after context and processes all that information.
• It then takes care of 3 critical tasks:
• For every affected resource, it will analyze five fundamental properties: exposure, access, status, encryption, and environment.
• It will generate a findings metric based on the total amount of security findings and their severity for every resource.
• Based on the previous metric and the output of the critical properties, it will generate an Impact Scoring metric.
• The HTML output was refreshed entirely and can be used for a better understanding of this concept

Happy Hunting!