
Cloud Security Suite (cs-suite)
#Network & Cloud#Cloud Security
Automatically compile AWS SCPs for compliant AWS services based on preferred frameworks.
Version 3.0 Usage Instructions
To use the command, type: cs.py [-h] -env {aws,gcp,azure,digitalocean} -aip AUDIT_IP -u USER_NAME -pem PEM_FILE [-p] [-pId PROJECT_ID] [-az_u AZURE_USER] [-az_p AZURE_PASS] [-o OUTPUT] [-w] [-n NUMBER]
Here’s a breakdown of the options:
-h: Display help information
-env: Specify the environment (choose from aws, gcp, azure, or digitalocean)
-aip: Set the AUDIT_IP address
-u: Provide the USER_NAME
-pem: Indicate the PEM_FILE to use
-p: Optional flag
-pId: Optional PROJECT_ID to specify
-az_u: Optional AZURE_USER for Azure authentication
-az_p: Optional AZURE_PASS for Azure authentication
-o: Define the OUTPUT file
-w: Optional flag
-n: Specify a NUMBER
Retrieving IP Address for Lynis Audit
This command is used to obtain the IP address specifically for the Lynis audit.
Optional arguments:
-h, --help Show this help message and exit.
-env {aws,gcp,azure,digitalocean}, --environment {aws,gcp,azure,digitalocean} Specify the cloud platform on which the test suite will be executed.
-aip AUDIT_IP, --audit_ip AUDIT_IP Define the IP address for which the Lynis audit will be conducted. By default, it attempts to use 'root' or 'Administrator' if no username is provided.
-u USER_NAME, --user_name USER_NAME Indicate the username for logging in, specific to a user account.
-pem PEM_FILE, --pem_file PEM_FILE Provide the PEM file necessary for accessing the AWS instance.
-p, --password Prompt for a hidden password.
-pId PROJECT_ID, --project_id PROJECT_ID Specify the Project ID for which the GCP audit will be performed. This can be retrieved using `gcloud projects list`.
-az_u AZURE_USER, --azure_user AZURE_USER Enter the username for the Azure account. This is optional and is used if you want to run the Azure audit without user interaction.
-az_p AZURE_PASS, --azure_pass AZURE_PASS Enter the password for the Azure account. This is also optional.