Usage

usage: cs.py [-h] -env {aws,gcp,azure,digitalocean} -aip AUDIT_IP -u USER_NAME -pem             PEM_FILE [-p] [-pId PROJECT_ID] [-az_u AZURE_USER]             [-az_p AZURE_PASS] [-o OUTPUT] [-w] [-n NUMBER]this is to get IP address for lynis audit onlyoptional arguments:  -h, --help            show this help message and exit  -env {aws,gcp,azure,digitalocean}, --environment {aws,gcp,azure,digitalocean}                        The cloud on which the test-suite is to be run  -aip AUDIT_IP, --audit_ip AUDIT_IP                        The IP for which lynis Audit needs to be done .... by                        default tries root/Administrator if username not                        provided  -u USER_NAME, --user_name USER_NAME                        The username of the user to be logged in,for a                        specific user  -pem PEM_FILE, --pem_file PEM_FILE                        The pem file to access to AWS instance  -p, --password        hidden password prompt  -pId PROJECT_ID, --project_id PROJECT_ID                        Project ID for which GCP Audit needs to be run. Can be                        retrivied using `gcloud projects list`  -az_u AZURE_USER, --azure_user AZURE_USER                        username of azure account, optionally used if you want                        to run the azure audit with no user interaction.  -az_p AZURE_PASS, --azure_pass AZURE_PASS                        username of azure password, optionally used if you                        want to run the azure audit with no user interaction.  -o OUTPUT, --output OUTPUT                        writes a log in JSON of an audit, ideal for                        consumptions into SIEMS like ELK and Splunk. Defaults                        to cs-audit.log  -w, --wipe            rm -rf reports/ folder before executing an audit  -n, --number          Retain number of report to store for a particular                         environment and user/project.

Requirements

Installation

AWS Configuration

GCP Configuration

Azure Configuration

[  {    "cloudName": "AzureCloud",    "id": "xxxxx-5595-4da5-bc27-xxxeeee",    "isDefault": true,    "name": "Free Trial",    "state": "Enabled",    "tenantId": "xxxxx-18e9-41a4-961b-xxxxx",    "user": {      "name": "customer@email.com",      "type": "user"    }  }]

DigitalOcean Configuration

Running cs-suite

To run AWS Audit - python cs.py -env awsTo run GCP Audit - python cs.py -env gcp -pId <project_name>To run Azure Audit - python cs.py -env azureTo run DigitalOcean Audit - python cs.py -env digitalocean

Docker Setup

$ cat aws/config[default]output = jsonregion = us-east-1

$ cat aws/credentials[default]aws_access_key_id = XXXXXXXXXXXXXXXaws_secret_access_key = XXXXXXXXXXXXXXXXXXXXXXXXX

docker run -v `pwd`/aws:/root/.aws -v `pwd`/reports:/app/reports securityftw/cs-suite -env aws

Documentation

Thanks