Show HN: RpCheckup – Catch AWS resource policy backdoors like Endgame

Show HN: RpCheckup – Catch AWS resource policy backdoors like Endgame(github.com)

10 points by gsoltis 5 years ago | 3 comments

gsoltis 5 years ago |

Hey all, we wrote rpCheckup after seeing the Endgame (https://news.ycombinator.com/item?id=26154038) post the other day. A lot of the issues it surfaces are things we routinely check for with our customers, but we are unaware of any open source tools that help AWS customers check on their own.

We would love to get your feedback and we hope you find it useful.

agordhandas 5 years ago |

This looks cool! Very timely. Every time I update our AWS settings (or provision new users/resources), I spend a decent amount of time just worrying whether I inadvertently opened up everything to the web.

Any plans to support running this as a cron job and diffing successive outputs?

gsoltis 5 years ago | |

Good suggestion! The underlying tech actually does support diffing resources over time, so it would be very possibly to generate a delta report.