duo-labs / duo-labs/cloudmapper
Detect use of a region based naming scheme
Open
audit
- Dominant language
- JavaScript
- Stars
- 6.3k
- Forks
- 836
- PR merge metrics
- No merged PRs in 30d
Description
Regarding https://onecloudplease.com/blog/s3-bucket-namesquatting, check for S3 buckets with names containing the regions (ex. mycompany-us-east-1, mycompany-us-east-2, etc.). If this pattern exists for all regions, then assume it is a set pattern for them, and alert because this could potentially break things for them if a new region comes out and someone squats on that region.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.