| Name | fixinventory-plugin-aws JSON |
| Version |
4.1.0
JSON |
| download |
| home_page | None |
| Summary | Runs collector plugins and sends the result to fixcore. |
| upload_time | 2024-07-18 16:39:08 |
| maintainer | None |
| docs_url | None |
| author | Some Engineering Inc. |
| requires_python | >=3.11 |
| license | AGPLv3 |
| keywords |
|
| VCS |
 |
| bugtrack_url |
|
| requirements |
No requirements were recorded.
|
| Travis-CI |
No Travis.
|
| coveralls test coverage |
No coveralls.
|
# fix-plugin-aws
An AWS collector plugin for Fix.
## Usage
For details on how to edit configuration, please see [the documentation](https://inventory.fix.security/docs/getting-started/configuring-fix).
When the collector is enabled (`fixworker.collector = [aws]`) it will automatically collect any accounts the AWS boto3 SDK can authenticate for.
By default it will check for environment variables like `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY` or `AWS_SESSION_TOKEN`.
If Fix should assume an IAM role that role can be given via `fixworker.aws.role = SomeRoleName`.
The collector will scrape resources in all regions unless regions are specified using e.g. `fixworker.aws.region = [us-east-1, us-west-2]`.
## Scraping multiple accounts
If the given credentials are allowed to assume the specified role in other accounts of your AWS organisation, Fix
can collect multiple accounts at the same time. To do so provide the account IDs to the `fixworker.aws.account` configuration.
## Scraping the entire organisation
Instead of giving a list of account IDs manually you could also specify `fixworker.aws.scrape_org`, which will make Fix try to get the list of all accounts using the [ListAccounts](https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListAccounts.html) API.
If certain accounts are to be excluded from that list they can be specified using the `fixworker.aws.scrape_exclude_account` config option.
## Miscellaneous Options
When collecting multiple accounts Fix by default will collect the accounts it finds in the org as well as the one it is currently authenticated as.
If you do not want it to scrape the account that was used to get the list of all org accounts (e.g. your root account) you can specify `fixworker.aws.dont_scrape_current`.
If instead of using the current credentials you would like Fix to assume the specified role (`fixworker.aws.role`) even for the current account you can specify the options
`fixworker.aws.assume_current` and `fixworker.aws.dont_scrape_current`. This would make it so that Fix does not scrape the current account using default credentials but instead assume the specified IAM role even for the current account.
## License
See [LICENSE](../../LICENSE) for details.
Raw data
{
"_id": null,
"home_page": null,
"name": "fixinventory-plugin-aws",
"maintainer": null,
"docs_url": null,
"requires_python": ">=3.11",
"maintainer_email": null,
"keywords": null,
"author": "Some Engineering Inc.",
"author_email": null,
"download_url": "https://files.pythonhosted.org/packages/3c/1e/d6edc23b98677e3b3766f0b795094b178fb9ca4ac1753c863c3e3617a654/fixinventory_plugin_aws-4.1.0.tar.gz",
"platform": null,
"description": "# fix-plugin-aws\nAn AWS collector plugin for Fix.\n\n## Usage\nFor details on how to edit configuration, please see [the documentation](https://inventory.fix.security/docs/getting-started/configuring-fix).\n\nWhen the collector is enabled (`fixworker.collector = [aws]`) it will automatically collect any accounts the AWS boto3 SDK can authenticate for.\nBy default it will check for environment variables like `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY` or `AWS_SESSION_TOKEN`.\n\nIf Fix should assume an IAM role that role can be given via `fixworker.aws.role = SomeRoleName`.\n\nThe collector will scrape resources in all regions unless regions are specified using e.g. `fixworker.aws.region = [us-east-1, us-west-2]`.\n\n\n## Scraping multiple accounts\nIf the given credentials are allowed to assume the specified role in other accounts of your AWS organisation, Fix\ncan collect multiple accounts at the same time. To do so provide the account IDs to the `fixworker.aws.account` configuration.\n\n## Scraping the entire organisation\nInstead of giving a list of account IDs manually you could also specify `fixworker.aws.scrape_org`, which will make Fix try to get the list of all accounts using the [ListAccounts](https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListAccounts.html) API.\n\nIf certain accounts are to be excluded from that list they can be specified using the `fixworker.aws.scrape_exclude_account` config option.\n\n## Miscellaneous Options\nWhen collecting multiple accounts Fix by default will collect the accounts it finds in the org as well as the one it is currently authenticated as.\nIf you do not want it to scrape the account that was used to get the list of all org accounts (e.g. your root account) you can specify `fixworker.aws.dont_scrape_current`.\n\nIf instead of using the current credentials you would like Fix to assume the specified role (`fixworker.aws.role`) even for the current account you can specify the options\n`fixworker.aws.assume_current` and `fixworker.aws.dont_scrape_current`. This would make it so that Fix does not scrape the current account using default credentials but instead assume the specified IAM role even for the current account.\n\n## License\nSee [LICENSE](../../LICENSE) for details.\n",
"bugtrack_url": null,
"license": "AGPLv3",
"summary": "Runs collector plugins and sends the result to fixcore.",
"version": "4.1.0",
"project_urls": {
"Documentation": "https://inventory.fix.security",
"Source": "https://github.com/someengineering/fix/tree/main/plugins/aws"
},
"split_keywords": [],
"urls": [
{
"comment_text": "",
"digests": {
"blake2b_256": "af2f85f70fe00755ca7710a66a9b537e2a563274e7e66d6d5dc3202ecd453cb4",
"md5": "74f38a283e44bf07b2d284c056fa7012",
"sha256": "c2047063136fd0ea3aa2f44d185bccf7dc0ba5c0701b40ee9a0b1ae8db730a63"
},
"downloads": -1,
"filename": "fixinventory_plugin_aws-4.1.0-py3-none-any.whl",
"has_sig": false,
"md5_digest": "74f38a283e44bf07b2d284c056fa7012",
"packagetype": "bdist_wheel",
"python_version": "py3",
"requires_python": ">=3.11",
"size": 352553,
"upload_time": "2024-07-18T16:39:06",
"upload_time_iso_8601": "2024-07-18T16:39:06.751081Z",
"url": "https://files.pythonhosted.org/packages/af/2f/85f70fe00755ca7710a66a9b537e2a563274e7e66d6d5dc3202ecd453cb4/fixinventory_plugin_aws-4.1.0-py3-none-any.whl",
"yanked": false,
"yanked_reason": null
},
{
"comment_text": "",
"digests": {
"blake2b_256": "3c1ed6edc23b98677e3b3766f0b795094b178fb9ca4ac1753c863c3e3617a654",
"md5": "267db05bf0ae4e2b57efd8a5a52817cd",
"sha256": "b7591d20cc70236664e7ee2ba7ece282cc4265b82c575a959c8f9f871bceb4e5"
},
"downloads": -1,
"filename": "fixinventory_plugin_aws-4.1.0.tar.gz",
"has_sig": false,
"md5_digest": "267db05bf0ae4e2b57efd8a5a52817cd",
"packagetype": "sdist",
"python_version": "source",
"requires_python": ">=3.11",
"size": 295661,
"upload_time": "2024-07-18T16:39:08",
"upload_time_iso_8601": "2024-07-18T16:39:08.150062Z",
"url": "https://files.pythonhosted.org/packages/3c/1e/d6edc23b98677e3b3766f0b795094b178fb9ca4ac1753c863c3e3617a654/fixinventory_plugin_aws-4.1.0.tar.gz",
"yanked": false,
"yanked_reason": null
}
],
"upload_time": "2024-07-18 16:39:08",
"github": true,
"gitlab": false,
"bitbucket": false,
"codeberg": false,
"github_user": "someengineering",
"github_project": "fix",
"github_not_found": true,
"lcname": "fixinventory-plugin-aws"
}
