Netflix / security_monkey

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.
Apache License 2.0
4.36k stars 800 forks source link

not getting description of Unknown issue #1211

Open chitender opened 5 years ago

chitender commented 5 years ago

Hi,

we have installed the Security Monkey version 1.1.1 on an EC2-instance. we are able to get reports. but for issue category, we are getting "Unknown Access" for multiple services, like RDS-Snapshots, SecurityGroups. attached is the screenshot.

image

Second Security-Monkey is not able to scan the S3 buckets, or we can say we are not able to find out the any report regarding S3.

looking forward to get the support on this.

mikegrima commented 5 years ago

The issue system in Security Monkey is broken. We're not going to fix, unfortunately, as it is non-trivial to fix and we are mostly keeping SM in light maintenance mode only.

mikegrima commented 5 years ago

As for S3, are you able to search for S3 buckets in the UI? If not, please verify that you have the correct IAM permissions.