Zeus
AWS Auditing & Hardening Tool
| Category | Security Assessment & Audit |
|---|---|
| Community Stars | 708 |
| Last Commit | 5 years ago |
| Last page update | 19 days ago |
| Pricing Details | Free and open source under MIT License. |
| Target Audience | AWS administrators, security professionals, compliance teams. |
Zeus addresses the critical security and compliance challenges in AWS environments by automating the auditing and hardening of various AWS services such as EC2, S3, CloudTrail, CloudWatch, and KMS. The tool is built using bash scripts and leverages the AWS-CLI, making it compatible with Linux, UNIX, and OSX systems.
Technically, Zeus operates by checking the current security settings against the CIS AWS Benchmark standards. It ensures best practices are enforced, such as multi-factor authentication (MFA) for IAM users, regular rotation of access keys, and the absence of root account access keys. The tool also focuses on logging mechanisms, ensuring CloudTrail is enabled in all regions, log file validation is active, and logs are encrypted at rest using KMS CMKs.
Operationally, Zeus requires the AWS-CLI to be installed and configured on the system. It includes functions to check for the presence of pip and AWS-CLI based on the operating system, ensuring smooth execution. The script can be run after cloning the repository and setting the necessary permissions.
Key considerations include the need for proper configuration of AWS profiles and the potential impact on existing security settings, as Zeus can modify configurations to align with recommended benchmarks. Additionally, the tool's logging and monitoring capabilities are extensive, with log metric filters and alarms set up for various security events, but this could add complexity to the overall monitoring setup and incur additional costs related to log storage and alerting.