🔥 Audit Data Platform environments

[jacobwoffenden]

Idea Description

Run security auditing tools against Data Platform environments

https://github.com/nccgroup/ScoutSuite
https://github.com/Shopify/kubeaudit

Why Should We Do This

Will give us an understanding of what we need to fix heading into an ITHC

Definition of Done

Generate a report for each account and identity any critical/high things we can address as our normal work

Accounts:

(we'll run against development because because we have higher access, and environments that are higher run the same workloads)

• data-platform-development
• data-platform-apps-and-tools-development

What skills do we need?

• AWS
• Kubernetes