{"repo":"rams3sh/Aaia","free":true,"listed":false,"github":"https://github.com/rams3sh/Aaia","clone":"git clone https://github.com/rams3sh/Aaia.git","description":"AWS Identity and Access Management Visualizer and Anomaly Finder","language":"Python","stars":296,"topics":["aws","iam","security","security-tools","pentesting","graph","neo4j"],"license":"GPL-3.0","category":"security-tools","readme_excerpt":"NOTE This repository is not under active development. However, I am open to accepting PRs. Aaia still works as there has been no significant changes in terms of AWS APIs it uses to collect data. Aaia (A)n(a)lysis of (I)dentity and (A)ccess Note: Expansion created post the name was decided :P What does Aaia do ? Aaia (pronounced as shown here ) helps in visualizing AWS IAM and Organizations in a graph format with help of Neo4j. This helps in identifying the outliers easily. Since it is based on neo4j , one can query the graph using cypher queries to find the anomalies. Aaia also supports modules to programatically fetch data from neo4j database and process it in a custom fashion. This is mostly useful if any complex comparision or logic has to be applied which otherwise would not be easy through cypher queries. Aaia was initially intended to be a tool to enumerate privelege esclation possibilities and find loop holes in AWS IAM. It was inspired from the quote by @JohnLaTwC \"Defenders think in lists. Attackers think in graphs. As long as this is true, attackers win.\" Why the name \"Aaia\" ? Aaia in Tamil means grandma. In general, Aaia knows everything about the family. She can easily connect who is related to whom; and how ;and give you the connection within a split second. She is a living graph database. :P Since \"Aaia\" (this tool) also does more or less the same, hence the name. Installation Install the neo4j Database 1. Installation using Docker (Recommended) i. Install Docke","default_branch":null,"files":null,"tree":[],"storefront":"/r/rams3sh","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/rams3sh/Aaia/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}