nccgroup / Scout2

Security auditing tool for AWS environments
http://nccgroup.github.io/Scout2/
GNU General Public License v2.0
1.73k stars 300 forks source link

Can't we run this Scout2 with out Internet ? #231

Closed cvemula1 closed 6 years ago

cvemula1 commented 6 years ago

Hi We are trying to run this Scout2 without internet connection on our premises AWS i mean we have EC2-Scout2 running in Private Subnet. we have seen that when we run Scout2 commands it's hitting the AWS endpoints to fetch the details.

Is there any way we can we run without Internet connection to the running server instance

Thanks, Chenna

Chris-Pr commented 6 years ago

Enable AmazonProvidedDNS in your DHCP config.

http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_DHCP_Options.html

On 20 December 2017 at 09:54, cvemula1 notifications@github.com wrote:

Hi We are trying to run this Scout2 without internet connection on our premises AWS i mean we have EC2-Scout2 running in Private Subnet. we have seen that when we run Scout2 commands it's hitting the AWS endpoints to fetch the details.

Is there any way we can we run without Internet connection to the running server instance

Thanks, Chenna

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/nccgroup/Scout2/issues/231, or mute the thread https://github.com/notifications/unsubscribe-auth/AIF_lP14VxithJJBVN8NsEmBsTYNTBkgks5tCD6TgaJpZM4RHqzv .

-- Chris Prangnell Sydney +61449247557

cvemula1 commented 6 years ago

Thanks for your reply

Did you try this ? Can you send me the scenario if you have worked before.

We are completely in the private VPC that instance doesn't have the internet access

Thanks, Chenna USA +1 201 5790467

l01cd3v commented 6 years ago

Scout2 relies on the public AWS APIs to fetch your environment's configuration. You'll need the machine your run the tool from to have Internet access.

AFAIK, this will be true until AWS provides VPC endpoints for every service - I don't know whether this is something they've considered.

cvemula1 commented 6 years ago

Thanks