nccgroup/ScoutSuite 5.9.0

on GitHub

Changes:

• Improved provider support:
  • AWS
    • Added 4 new ELB & ELBv2 findings (thanks to @goelaarushi04)
    • Added support for the "Amazon S3 Block Public Access" feature
    • Improved Lambda partial
    • Added support for RDS Aurora instances
  • Azure
    • Improved the authentication flow, and handling of subscriptions
  • GCP
    • Added support for Stackdriver Monitoring
    • Improved report content
    • Merged IAM & Resource Manager services
    • Added logic that validates if an API is enabled for a service & project prior to making additional API calls
• Updated the rule format, to allow remediation & compliance information, as well as external references
  • Added rationales for most rules
  • Improved rules' content, adding remediation and references for a number of rules
  • Added the class_suffix field to highlight multiple elements
  • Additional information in https://github.com/nccgroup/ScoutSuite/wiki/HowTo:-Create-a-new-rule
• Added an option in the report (top-right menu) to export a high level finding summary
• Added a tool/util to upload findings to AWS Security Hub (see https://github.com/nccgroup/ScoutSuite/tree/develop/tools#aws_security_hub_exportpy)
• Improved open source project public content
• Bug fixes