feature requests - support for AWS Organizations

vifor2 commented 5 years ago

Support for AWS Organizations should be implemented. This should allow scanning a whole org similar to GCP implementation.

In this commit the block of code fetching the ID of all accounts under an organization was removed for a few reasons :

It was the last chunk of code using profiles.py since profiles.py's functionalities where exchanged with the ones implemented already in boto3 Sessions.
It was implemented at the wrong place, which was at the end of __main__ although it was only used by AWS.
It was partially implemented.

It should now be implemented elsewhere, properly, using AWS Organizations so that a user using Scout Suite against his organization can view all the relevant information about it in his report. For example, the only thing the removed block code did was gather the ID of all users under an account, this can be done with list_accounts().

munntjlx commented 4 years ago

Was this ever finished?

x4v13r64 commented 4 years ago

@munntjlx this is not currently implemented, and is part of https://github.com/nccgroup/ScoutSuite/milestone/18.

nccgroup / ScoutSuite

feature requests - support for AWS Organizations #249