duo-labs / cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
BSD 3-Clause "New" or "Revised" License
5.9k stars 800 forks source link

Collect more org level info #821

Open 0xdabbad00 opened 3 years ago

0xdabbad00 commented 3 years ago

Add to collect:

- Service: organizations
  Request: list-policies
  Parameters:
    - Name: Filter
      Value: SERVICE_CONTROL_POLICY
- Service: organizations
  Request: describe-policy
  Parameters:
    - Name: PolicyId
      Value: organizations-list-policies.json|.Policies[]?|.Id
- Service: organizations
  Request: list-roots
- Service: organizations
  # I think this is actually recursive, but I don't have a way of doing that.
  Request: list-organizational-units-for-parent
  Parameters:
    - Name: ParentId
      Value: organizations-list-roots.json|.Roots[]?|.Id
- Service: organizations
  Request: list-targets-for-policy
  Parameters:
  - Name: PolicyId
    Value: organizations-list-policies.json|.Policies[]?|.Id
w0rmr1d3r commented 3 years ago

@0xdabbad00 done in here -> https://github.com/duo-labs/cloudmapper/pull/848