search

duo-labs / cloudtracker

CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.
BSD 3-Clause "New" or "Revised" License
887 stars 111 forks source link

Performance issue #84

Closed Almenon closed 1 year ago

Almenon commented 1 year ago

Cloudtracker looked like a really cool tool, so I tried it out, but ran into a performance issue. On a account with a lot of users cloudtracker is quite slow. It looks like it's just partitioning by date, not user, so searching for a single user searches all users. At that point the performance of the python code doesn't matter because the Athena query alone takes some time. Is there a reason why it's not partitioning by user?

0xdabbad00 commented 1 year ago

Cloudtrail logs are partitioned by date, so this uses what Cloudtrail offers.

Almenon commented 1 year ago

Makes sense, thanks for the quick response