What does "third party" do? about security_monkey HOT 2 CLOSED

Good question.

When we allow an AWS Support account access to one of our resources, we will put the account details in security monkey and flag them as third party. The audit issues Security Monkey comes up with then identify the cross-account access as "third party". That's about it.

Security Monkey shouldn't try to slurp the configuration from any third party account. Another flag called "active" can also be set or unset to enable/disable the slurping.

From security_monkey/init.py

accounts = Account.query.filter(Account.third_party==False).filter(Account.active==True).all()

I think a Google Group is a good idea. I'll look into setting one up.

from security_monkey.

Thanks, that helps a lot.

from security_monkey.