aws_recon 0.2.27 → 0.2.28

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2735a8f96df8c633e71fb31cd0a67248bd4f1cf1205ef6815e438d223810f5e9
-  data.tar.gz: a134383f05173c5e46005859b637b45d35f2ad33df518c5befb4f443122ea623
+  metadata.gz: 8df2a508259a0c930a5bfa6c9c01965eeb1fe9955fb6dc48e812303a79062d85
+  data.tar.gz: 4118ae4e81b0361d8e6c5193eb4adeb69f7c6c0e37e2e8c13ed6e4357c4b377b
 SHA512:
-  metadata.gz: 14ceefcb774b6067837b4eec5e421be0992a93372fbdea73dcc397e6e5a45c5fab69fdec8e5a150e8ce20d88215f78d35609fb59699b9cb9f9ddb63074262f71
-  data.tar.gz: df340090ee783531f7686c85fe42b5474d1f8f8534d0b3de1e47711e864512752e06f91f525f770c37f87714667e17257dbdc25faa4bb65ea0e8b2e0f87c0a0d
+  metadata.gz: 633d6e44f13ffb2d1cb34aad13cb0139db582e62fe195564f476d41ac267762d28a5f2c9baacc5fee97344d960fff19ef95fc21d72f2bdbf96f701c107107b4a
+  data.tar.gz: e61afaa923d73cf1d48708f8eff4ca5462cc24fd59a3227178356451cb31a1553a7ad9f5818d52da597171bfa49ef58b8259ff4e5a49ae89c1c3bd8f8a3feb4a

data/lib/aws_recon/collectors/accessanalyzer.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect AccessAnalyzer resources
+#
 class AccessAnalyzer < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/acm.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect ACM resources
+#
 class ACM < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/apigateway.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect API Gateway resources
+#
 class APIGateway < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/apigatewayv2.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect API Gateway v2 resources
+#
 class ApiGatewayV2 < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/applicationautoscaling.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect ApplicationAutoScaling resources
+#
 class ApplicationAutoScaling < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/athena.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Athena resources
+#
 class Athena < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/autoscaling.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect AutoScaling resources
+#
 class AutoScaling < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/backup.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Backup resources
+#
 class Backup < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/cloudformation.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect CloudFormation resources
+#
 class CloudFormation < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/cloudfront.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect CloudFront resources
+#
 class CloudFront < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/cloudtrail.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect CloudTrail resources
+#
 class CloudTrail < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/cloudwatch.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect CloudWatch resources
+#
 class CloudWatch < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/cloudwatchlogs.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect CloudWatchLogs resources
+#
 class CloudWatchLogs < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/codebuild.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect CodeBuild resources
+#
 class CodeBuild < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/codepipeline.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect CodePipeline resources
+#
 class CodePipeline < Mapper
   #
   # Returns an array of resources.
@@ -25,9 +30,7 @@ class CodePipeline < Mapper
     rescue Aws::CodePipeline::Errors::ServiceError => e
       log_error(e.code)
 
-      unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
-        raise e
-      end
+      raise e unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
     end
 
     resources

data/lib/aws_recon/collectors/configservice.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Config resources
+#
 class ConfigService < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/directconnect.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect DirectConnect resources
+#
 class DirectConnect < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/{directyservice.rb → directoryservice.rb}

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect DirectoryService resources
+#
 class DirectoryService < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/dms.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect DMS resources
+#
 class DatabaseMigrationService < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/dynamodb.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect DynamodDB resources
+#
 class DynamoDB < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/ec2.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect EC2 resources
+#
 class EC2 < Mapper
   #
   # Returns an array of resources.
@@ -71,9 +76,7 @@ class EC2 < Mapper
               if user_data_raw
                 user_data = Base64.decode64(user_data_raw)
 
-                if user_data.force_encoding('UTF-8').ascii_only?
-                  struct.user_data = user_data
-                end
+                struct.user_data = user_data if user_data.force_encoding('UTF-8').ascii_only?
               end
             end
 

data/lib/aws_recon/collectors/ecr.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect ECR resources
+#
 class ECR < Mapper
   #
   # Returns an array of resources.
@@ -21,9 +26,7 @@ class ECR < Mapper
       rescue Aws::ECR::Errors::ServiceError => e
         log_error(e.code)
 
-        unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
-          raise e
-        end
+        raise e unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
       ensure
         resources.push(struct.to_h)
       end

data/lib/aws_recon/collectors/ecs.rb

@@ -1,9 +1,12 @@
+# frozen_string_literal: true
+
+#
+# Collect ECS resources
+#
 class ECS < Mapper
   #
   # Returns an array of resources.
   #
-  # TODO: test live
-  #
   def collect
     resources = []
 

data/lib/aws_recon/collectors/efs.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect EFS resources
+#
 class EFS < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/eks.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect EKS resources
+#
 class EKS < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/elasticache.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect ElastiCache resources
+#
 class ElastiCache < Mapper
   def collect
     resources = []

data/lib/aws_recon/collectors/elasticloadbalancing.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect ELB resources
+#
 class ElasticLoadBalancing < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/elasticloadbalancingv2.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect ELBv2 resources
+#
 class ElasticLoadBalancingV2 < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/elasticsearch.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect ElasticSearch resources
+#
 class ElasticsearchService < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/emr.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect EMR resources
+#
 class EMR < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/firehose.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Firehose resources
+#
 class Firehose < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/guardduty.rb

@@ -1,9 +1,12 @@
+# frozen_string_literal: true
+
+#
+# Collect GuardDuty resources
+#
 class GuardDuty < Mapper
   #
   # Returns an array of resources.
   #
-  # TODO: test live
-  #
   def collect
     resources = []
 

data/lib/aws_recon/collectors/iam.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect IAM resources
+#
 class IAM < Mapper
   #
   # Returns an array of resources.
@@ -102,9 +107,7 @@ class IAM < Mapper
     rescue Aws::IAM::Errors::ServiceError => e
       log_error(e.code)
 
-      unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
-        raise e
-      end
+      raise e unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
     end
 
     #
@@ -187,9 +190,7 @@ class IAM < Mapper
     rescue Aws::IAM::Errors::ServiceError => e
       log_error(e.code)
 
-      unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
-        raise e
-      end
+      raise e unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
     end
 
     resources

data/lib/aws_recon/collectors/kafka.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Kafka resources
+#
 class Kafka < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/kinesis.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Kinesis resources
+#
 class Kinesis < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/kms.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect KMS resources
+#
 class KMS < Mapper
   #
   # Returns an array of resources.
@@ -30,9 +35,7 @@ class KMS < Mapper
         rescue Aws::KMS::Errors::ServiceError => e
           log_error(e.code)
 
-          unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
-            raise e
-          end
+          raise e unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
         end
 
         # list_grants

data/lib/aws_recon/collectors/lambda.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Lambda resources
+#
 class Lambda < Mapper
   def collect
     resources = []

data/lib/aws_recon/collectors/lightsail.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Lightsail resources
+#
 class Lightsail < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/organizations.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Org resources
+#
 class Organizations < Mapper
   #
   # Returns an array of resources.
@@ -49,9 +54,7 @@ class Organizations < Mapper
     rescue Aws::Organizations::Errors::ServiceError => e
       log_error(e.code)
 
-      unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
-        raise e
-      end
+      raise e unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
     end
 
     resources

data/lib/aws_recon/collectors/redshift.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Redshift resources
+#
 class Redshift < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/route53.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Route53 resources
+#
 class Route53 < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/route53domains.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Route53 Domain resources
+#
 class Route53Domains < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/secretsmanager.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Secrets Manager resources
+#
 class SecretsManager < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/securityhub.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Security Hub resources
+#
 class SecurityHub < Mapper
   #
   # Returns an array of resources.
@@ -21,9 +26,7 @@ class SecurityHub < Mapper
     rescue Aws::SecurityHub::Errors::ServiceError => e
       log_error(e.code)
 
-      unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
-        raise e
-      end
+      raise e unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
     end
 
     resources

data/lib/aws_recon/collectors/servicequotas.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect ServiceQuota resources
+#
 class ServiceQuotas < Mapper
   #
   # Returns an array of resources.
@@ -28,9 +33,7 @@ class ServiceQuotas < Mapper
     rescue Aws::ServiceQuotas::Errors::ServiceError => e
       log_error(e.code, service)
 
-      unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
-        raise e
-      end
+      raise e unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
     end
 
     resources

data/lib/aws_recon/collectors/ses.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect SES resources
+#
 class SES < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/shield.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Shield resources
+#
 class Shield < Mapper
   #
   # Returns an array of resources.
@@ -52,9 +57,7 @@ class Shield < Mapper
   rescue Aws::Shield::Errors::ServiceError => e
     log_error(e.code)
 
-    unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
-      raise e
-    end
+    raise e unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
 
     [] # no access or service isn't enabled
   end

data/lib/aws_recon/collectors/sns.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect SNS resources
+#
 class SNS < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/sqs.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect SQS resources
+#
 class SQS < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/ssm.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect SSM resources
+#
 class SSM < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/support.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Support resources
+#
 class Support < Mapper
   #
   # Returns an array of resources.
@@ -28,9 +33,7 @@ class Support < Mapper
   rescue Aws::Support::Errors::ServiceError => e
     log_error(e.code)
 
-    unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
-      raise e
-    end
+    raise e unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
 
     [] # no Support subscription
   end

data/lib/aws_recon/collectors/transfer.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect Transfer resources
+#
 class Transfer < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/wafv2.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect WAFv2 resources
+#
 class WAFV2 < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/workspaces.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect WorkSpaces resources
+#
 class WorkSpaces < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/collectors/xray.rb

@@ -1,3 +1,8 @@
+# frozen_string_literal: true
+
+#
+# Collect XRay resources
+#
 class XRay < Mapper
   #
   # Returns an array of resources.

data/lib/aws_recon/lib/patch.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 #
 # Parse and unescape AWS policy document string
 #

data/lib/aws_recon/options.rb

@@ -1,5 +1,8 @@
 # frozen_string_literal: true
 
+#
+# Command line options parser
+#
 class Parser
   DEFAULT_CONFIG_FILE = nil
   DEFAULT_OUTPUT_FILE = File.expand_path(File.join(Dir.pwd, 'output.json')).freeze
@@ -97,16 +100,12 @@ class Parser
 
       # output format
       opts.on('-f', '--format [FORMAT]', 'Specify output format (default: aws)') do |file|
-        if %w[aws custom].include?(file.downcase)
-          args.output_format = file.downcase
-        end
+        args.output_format = file.downcase if %w[aws custom].include?(file.downcase)
       end
 
       # threads
       opts.on('-t', '--threads [THREADS]', "Specify max threads (default: #{Parser::DEFAULT_THREADS}, max: 128)") do |threads|
-        if (0..Parser::MAX_THREADS).include?(threads.to_i)
-          args.threads = threads.to_i
-        end
+        args.threads = threads.to_i if (0..Parser::MAX_THREADS).include?(threads.to_i)
       end
 
       # collect EC2 instance user data

data/lib/aws_recon/version.rb

@@ -1,3 +1,3 @@
 module AwsRecon
-  VERSION = "0.2.27"
+  VERSION = "0.2.28"
 end

data/readme.md

@@ -23,7 +23,7 @@ Enter AWS Recon, multi-threaded AWS inventory collection tool written in plain R
 
 ### Requirements
 
-AWS Recon needs AWS account role or credentials with `ReadOnlyAccess`. Full `AdministratorAccess` is over-privileged, but will work as well. The `SecurityAudit` policy is **not** sufficient as it omits access to many services.
+AWS Recon needs an AWS account role or credentials with `ReadOnlyAccess`. Full `AdministratorAccess` is over-privileged, but will work as well. The `SecurityAudit` policy is **not** sufficient as it omits access to many services.
 
 #### Running via Docker
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws_recon
 version: !ruby/object:Gem::Version
-  version: 0.2.27
+  version: 0.2.28
 platform: ruby
 authors:
 - Josh Larsen
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2020-12-22 00:00:00.000000000 Z
+date: 2021-01-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk
@@ -197,7 +197,7 @@ files:
 - lib/aws_recon/collectors/codepipeline.rb
 - lib/aws_recon/collectors/configservice.rb
 - lib/aws_recon/collectors/directconnect.rb
-- lib/aws_recon/collectors/directyservice.rb
+- lib/aws_recon/collectors/directoryservice.rb
 - lib/aws_recon/collectors/dms.rb
 - lib/aws_recon/collectors/dynamodb.rb
 - lib/aws_recon/collectors/ec2.rb