ElectricEye

ElectricEye manages and secures multi-cloud and multi-SaaS environments with a robust Python CLI tool for Asset Management, Security Posture Management, and Attack Surface Monitoring. It supports over 100 services including AWS, GCP, OCI, Azure, Microsoft 365, Salesforce, and ServiceNow.

The technical architecture of ElectricEye revolves around the concept of "Auditors," which are sets of Python scripts that execute specific "Checks" against designated "Assessment Targets." These targets can be entire cloud accounts, regions, or specific SaaS services. The tool allows for granular control, enabling users to run entire assessments, specific auditors, or individual checks within an auditor. This flexibility is enhanced by the ability to configure the tool using a TOML file, which specifies credentials, regions, accounts, and other global settings.

ElectricEye needs careful IAM role configuration, particularly with AWS Organizations or other cloud services. For instance, the account runninguld be the AWS Organizations Management Account or a Delegated Admin for AWS FMS or Amazon GuardDuty. It support ElectricEye shos multiple output formats like AWS Security Hub, JSON, CSV, HTMLtegrates with Slack, enabling versatile reportin reports, and ing and alerting.

Key operational considerations include managing dependencies and updates, as the tool's dependencies remain relatively stable until new cloud or major integrations are added. Building and pushing Docker images to repositories like Amazon ECR or Oracle Cloud Infrastructure Registry requires specific permissions and commands. Additionally, ensuring the correct permissions for retrieving credentials from AWS Systems Manager Parameter Store or AWS Secrets Manager is crucial for seamless operation.

ElectricEye uses Python 3.9 and virtual environments for execution, with over 1000 checks mapped to various industry, regulatory, and best practice frameworks. This ensures comprehensive coverage of security, resilience, performance, and financial best practices across various services. However, the tool's performance and scalability should be monitored, particularly when handling large-scale multi-account and multi-region assessments.