[NEW EXAMPLE] Security Monkey - Watchers

[ainzzorl]

General

• Project name: Security Monkey
• Example name: Watchers
• Project home page: https://github.com/Netflix/security_monkey
• Programming language(s): Python

Description

"Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time. "

"Watcher — The component that monitors a given AWS account and technology (e.g. S3, IAM, EC2). The Watcher detects and records changes to configurations. So, if a new IAM user is created or if an S3 bucket policy changes, the Watcher will detect this and store the change in Security Monkey’s database."

Links

• https://github.com/Netflix/security_monkey/blob/c28592ffd518fa399527d26262683fc860c30eef/security_monkey/watcher.py
• https://github.com/Netflix/security_monkey/tree/develop/security_monkey/watchers
• https://github.com/Netflix/security_monkey/tree/c28592ffd518fa399527d26262683fc860c30eef/security_monkey/tests/watchers

What makes it interesting

• Popular product.
• Overall very reusable approach.

Related work

• https://netflixtechblog.com/announcing-security-monkey-aws-security-configuration-monitoring-and-analysis-1f2bfb001708

Other

Security Monkey is not being actively developed and is (?) effectively deprecated. But the code is still interesting.

[ainzzorl]

After spending quite a lot of time reading this code, unfortunately I'm not sure I'm ready to call this good code worth featuring.