ScoutMerge

ScoutMerge is an extension for the cloud auditing tool ScoutSuite. When working with large cloud environments containing hundreds or even thousands of projects (GCP) or accounts (AWS), tools like ScoutSuite can struggle or break due to the overwhelming amount of data. ScoutMerge addresses this by allowing you to run the scout command on each project or account individually, then aggregates the results into a single text file that lists each affected project or account for each ScoutSuite finding, if any.

Supported Cloud Providers

• AWS
• GCP

Usage

Requirements: See ScoutSuite wiki

AWS

1. Authenticate and run ScoutSuite for each AWS account in scope. Save all output in one main directory
2. Run the aws.py script with the the -d flag pointing to the main directory with the scoutsuite output. It is assumed that your directory structure is as follows:

> tree -L 1
scoutsuite_output_directory
├── fsociety-eu-pre
├── fsociety-us-prod
├── steel-mountain-us-pre
├── steel-mountain-us-prod
├── allsafe-us-pre
├── allsafe-eu-prod
├── dark-army-us-pre
├── dark-army-us-prod
├── ecorp-dev
└── ecorp-us-prod

GCP

For GCP, the script takes a Folder ID as input, finds all projects in specified folder as well as subfolders, runs the scout command on each project found, then proceeds to aggregate the results into one text file.

1. Authenticate with gcloud
2. Do not set default project
3. Run gcp.py with the -f flag for the Folder ID housing the projects in scope

Feature Roadmap

☑ GCP

☑ AWS

☐ Azure