From the course: CompTIA CySA+ (CS0-002) Cert Prep: 4 Software and Systems Security

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Cloud auditing tools

Cloud auditing tools

From the course: CompTIA CySA+ (CS0-002) Cert Prep: 4 Software and Systems Security

Start my 1-month free trial

Cloud auditing tools

- [Instructor] As a cyber security analyst, you have a variety of tools at your disposal to assist with auditing the use of cloud services. Let's take a look at three tools that you're required to understand for the CySA+ exam. The first tool we'll examine is a tool called ScoutSuite. This is a multi-cloud auditing tool that reaches into your cloud provider account using the provided APIs and runs a security assessment of that account. ScoutSuite is capable of auditing cloud services from Amazon Web Services, Microsoft Azure, Google Compute Platform, Alibaba Cloud, and Oracle Cloud Infrastructure. ScoutSuite is a Python script, so we run it using the Python interpreter. It's important to note that I'm running this script on an AWS instance that already has access to read security settings in my AWS environment. As we give it a try, ScoutSuite begins gathering information using the AWS API about a number of services that…

Contents