search

tmobile / pacbot

PacBot (Policy as Code Bot)
https://tmobile.github.io/pacbot/
Apache License 2.0
1.29k stars 276 forks source link

Does Pacbot scan the cloud or the cloud infrastructure code (eg, like TF scripts) #518

Closed bhuvi11 closed 3 years ago

bhuvi11 commented 3 years ago

Hello Team,

I am trying to use pacbot and curious to know how it works.

Does it scan the cloud infrastructure or the scrips written to up the services like tf scripts? I see we have checkov that scans the IaC files, does pacbot does the same?

Akashbhaskaran commented 3 years ago

It scans the cloud (AWS and Azure ) infrastructure and not the Iac scripts.

bhuvi11 commented 3 years ago

Hello @Akashbhaskaran,

Thanks for the quick response. So pacbot would need authentication details for the cloud account?

Akashbhaskaran commented 3 years ago

Pacbot is installed in AWS . For scanning AWS resources, it requires iam roles and trust relationship configuration for role assumption . For scanning azure resources , the authentication details such as client id / client secret is required.