Cloud Security Suite (cs-suite)

Cloud Security Suite (cs-suite)

#Network & Cloud#Cloud Security

Automatically compile AWS SCPs for compliant AWS services based on preferred frameworks.

Visit Website

Version 3.0 Usage Instructions

To use the command, type: cs.py [-h] -env {aws,gcp,azure,digitalocean} -aip AUDIT_IP -u USER_NAME -pem PEM_FILE [-p] [-pId PROJECT_ID] [-az_u AZURE_USER] [-az_p AZURE_PASS] [-o OUTPUT] [-w] [-n NUMBER] Here’s a breakdown of the options: -h: Display help information -env: Specify the environment (choose from aws, gcp, azure, or digitalocean) -aip: Set the AUDIT_IP address -u: Provide the USER_NAME -pem: Indicate the PEM_FILE to use -p: Optional flag -pId: Optional PROJECT_ID to specify -az_u: Optional AZURE_USER for Azure authentication -az_p: Optional AZURE_PASS for Azure authentication -o: Define the OUTPUT file -w: Optional flag -n: Specify a NUMBER

Retrieving IP Address for Lynis Audit

This command is used to obtain the IP address specifically for the Lynis audit. Optional arguments: -h, --help Show this help message and exit. -env {aws,gcp,azure,digitalocean}, --environment {aws,gcp,azure,digitalocean} Specify the cloud platform on which the test suite will be executed. -aip AUDIT_IP, --audit_ip AUDIT_IP Define the IP address for which the Lynis audit will be conducted. By default, it attempts to use 'root' or 'Administrator' if no username is provided. -u USER_NAME, --user_name USER_NAME Indicate the username for logging in, specific to a user account. -pem PEM_FILE, --pem_file PEM_FILE Provide the PEM file necessary for accessing the AWS instance. -p, --password Prompt for a hidden password. -pId PROJECT_ID, --project_id PROJECT_ID Specify the Project ID for which the GCP audit will be performed. This can be retrieved using `gcloud projects list`. -az_u AZURE_USER, --azure_user AZURE_USER Enter the username for the Azure account. This is optional and is used if you want to run the Azure audit without user interaction. -az_p AZURE_PASS, --azure_pass AZURE_PASS Enter the password for the Azure account. This is also optional.