[{"data":1,"prerenderedAt":169},["ShallowReactive",2],{"project-23079301":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":14,"rank_in_year":15,"shown_in_year":16,"top":17,"tier":18,"category":19,"subcategory":20,"format":21,"keywords":22,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":33,"aspects":34,"strip":36,"post_text":28,"what":38,"said":66,"maker_in_thread":109,"shape":116,"grid":119,"attempts":131,"same_week":132,"maker_shows":33,"maker_hidden":162,"reader_version":163,"card":164},"23079301","Cloudsplaining","An AWS IAM Security Assessment Tool","title","Show HN: Cloudsplaining, an AWS IAM Security Assessment Tool","https:\u002F\u002Fgithub.com\u002Fsalesforce\u002Fcloudsplaining","github.com","kmcquade",1588682014,2020,6,2758,3028,92,"shown","security_privacy","cloud iam security assessment","cli",[23,24,25,26],"aws iam","iam security","privilege escalation","aws security audit","quiet",null,{"positive":30,"neutral":31,"mixed":32,"critical":32},1,2,0,3,{"docs":35},{"positive":30,"critical":32},[37,32,33,32,33,32],5,{"problem":39,"audience":52,"pricing":28,"motivation":57,"time_to_build":28,"stack":62,"openness":63,"stage":64,"team_size":65},{"value":40,"source":41,"evidence":42},"Finding overly permissive or risky AWS IAM roles and policies","inferred",[43,45,49],{"id":44},"post",{"id":46,"by":47,"text":48},"23080287","fred1991","Damn. The report guidance is really good. I'm going to use this in an assessment next week :) Have to review an account that has hundreds of IAM roles but this should help a lot,.",{"id":50,"by":11,"text":51},"23080502","PMapper is definitely a great tool. It’s best used in Pentests for validating some privilege escalation paths. It has the benefit of analyzing IAM trust policies, resource based…",{"value":53,"source":41,"evidence":54},"Security assessors and pentesters reviewing AWS accounts",[55,56],{"id":46,"by":47,"text":48},{"id":50,"by":11,"text":51},{"value":58,"source":59,"evidence":60},"Find damage possible by modifying infrastructure even without full privilege escalation","maker",[61],{"id":50,"by":11,"text":51},[],"open_source","launched","unknown",{"praise":67,"objections":77,"requests":85,"questions":93,"alternatives":104},[68,73],{"value":69,"source":70,"evidence":71},"Report guidance is good and useful for assessments","commenter",[72],{"id":46,"by":47,"text":48},{"value":74,"source":59,"evidence":75},"Faster at creating a comprehensive report than PMapper",[76],{"id":50,"by":11,"text":51},[78],{"value":79,"source":70,"evidence":80},"Documentation lacks required privileges to run it",[81],{"id":82,"by":83,"text":84},"23080594","chmod-noobs","What kind of privileges do I need to run it? I don’t see any details in the documentation. You should probably add this there.",[86],{"value":87,"source":70,"evidence":88},"Document the required IAM privileges in the README",[89,90],{"id":82,"by":83,"text":84},{"id":91,"by":11,"text":92},"23081360","You just need a single IAM action - iam:GetAccountAuthorizationDetails (https:\u002F\u002Fdocs.aws.amazon.com\u002FIAM\u002Flatest\u002FAPIReference\u002FAPI_GetAccountAuthorizationDetails.html). I’ll…",[94,100],{"value":95,"source":70,"evidence":96},"How does it differ from PMapper",[97],{"id":98,"by":83,"text":99},"23080429","Cool project. How is this different from PMapper though? I use that it some of my assessments (underrated tool IMHO).",{"value":101,"source":70,"evidence":102},"What privileges are needed to run it",[103],{"id":82,"by":83,"text":84},[105],{"value":106,"source":70,"evidence":107},"PMapper",[108],{"id":98,"by":83,"text":99},{"comments":33,"answered":31,"key":110},[111,114,115],{"id":112,"text":113},"23080315","Thanks! I’m glad you like it. Let me know if you have any feedback - here, in the Gitter channel (link in the Readme), or on Twitter (kmcquade3)",{"id":91,"text":92},{"id":50,"text":51},{"commenters":33,"max_depth":117,"maker_replies":33,"first_comment_mins":118,"lifespan_hours":33},4,110,[120,122,124,126,127,129],[46,32,37,121,47,32],"project\u002Fpositive\u002Fdocs",[112,32,32,123,11,30],"maker\u002Fneutral\u002Fnone",[82,32,33,125,83,32],"project\u002Fneutral\u002Fdocs",[91,32,32,125,11,30],[98,30,33,128,83,32],"project\u002Fneutral\u002Fnone",[50,30,32,130,11,30],"project\u002Fpositive\u002Fperformance",[],[133,138,143,148,152,157],{"id":134,"name":135,"points":136,"category":137},"23045207","uPlot",785,"data",{"id":139,"name":140,"points":141,"category":142},"23070567","Caddy 2",778,"infrastructure",{"id":144,"name":145,"points":146,"category":147},"23066776","SQL Police Department",550,"learning_science",{"id":149,"name":150,"points":151,"category":147},"23042079","RegEx for Regular Folk",502,{"id":153,"name":154,"points":155,"category":156},"23033387","Tara",406,"productivity",{"id":158,"name":159,"points":160,"category":161},"23042558","Ameelio.org",364,"web_saas",false,"v2",{"id":165,"name":5,"line":6,"ai":162,"cat":19,"year":13,"points":14,"comments":14,"rec":27,"s":28,"top":17,"kw":166,"maker":11,"domain":10,"tier":18,"attempts":32,"strip":167,"url":9,"mix":168,"praise":69,"objection":79,"sub":20},23079301,[23,24,25,26],"503030",[30,31,32,32],1794036590056]