FogSecurity/yes3-scanner: YES3 Scanner: S3 Security Scanner for Access and Ransomware Protection

Source: GitHub Author: unknown URL: https://github.com/FogSecurity/yes3-scanner

  1. ONE SENTENCE SUMMARY: YES3 is a Python-based tool that scans AWS accounts for S3 bucket misconfigurations, focusing on access, security, and ransomware protection.

  2. MAIN POINTS:

  3. YES3 scans AWS S3 buckets for access, encryption, and security misconfigurations.

  4. Detects public access via ACLs, policies, and website settings.

  5. Checks for preventative settings like Public Access Block and disabled ACLs.

  6. Identifies additional security configurations like encryption and server access logging.

  7. Evaluates ransomware protection through Object Lock and versioning.

  8. Outputs detailed reports of potential issues per bucket.

  9. Requires Python 3, boto3, and proper AWS IAM permissions to run.

  10. Scans globally with region input for quota checks via Boto3 client.

  11. Offers a private beta for multi-account and object-level scanning.

  12. Installation is via pip and requirements.txt; virtual environments are supported.

  13. TAKEAWAYS:

  14. YES3 helps secure S3 by identifying misconfigurations and potential vulnerabilities.

  15. Reports include granular bucket-level security details for actionable insights.

  16. Public access detection spans multiple configurations including ACLs and policies.

  17. Additional features like Object Lock and lifecycle policies enhance ransomware protection.

  18. The tool is actively developed, with expanded functionality planned for future releases.