duo-labs / cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
BSD 3-Clause "New" or "Revised" License
6k stars 810 forks source link

EC2's not being reported by public command when other issues exist #668

Closed 0xdabbad00 closed 4 years ago

0xdabbad00 commented 4 years ago

If you have an EC2 with the default security group applied to it such that all traffic is allowed access to it from it's own security group, then this get's written as a warning by the public command (which it probably shouldn't), but more importantly, it causes the EC2 (or other resource) to not be reported!

This is due to this if block https://github.com/duo-labs/cloudmapper/blob/d6b69985ff7e86ba7a4525e29d6b1795941cb9ce/shared/public.py#L149

causing execution to not reach this https://github.com/duo-labs/cloudmapper/blob/d6b69985ff7e86ba7a4525e29d6b1795941cb9ce/shared/public.py#L195