fixinventory

t is why it might be using any number of commercial 3rd party add-ons. > I'm curious to know what Material UI provided that any other open-source UI library did not. I believe it was some MUI X table features like multi row sorting that we didn't feel like re-implementing. I'm sure there's other open source libs that would do that, but we've settled on MUI and are not going to start mixing different UI libraries for different visual elements if we don't absolutely have to.

aintain a large graph, where nodes are indexed JSON documents representing your cloud resources, and different edges signify various dependencies. This allows flexible searches and policy creation using our search syntax. For example: Find large EC2 instances: search is(aws_ec2_instance) and instance_cores > 8 Find unused EBS volumes with last reading IOPS more than 30d ago: search is(aws_ec2_volume) and volume_status = available and last_access > 30d Find IAM policies that are attached to users instead of groups or roles: search is(aws_iam_user) {attached_policy: --> is(aws_iam_policy)} user_policies!=[] or attached_policy!=null Find SNS topics that are not encrypted at rest using KMS CMKs: search is(aws_sns_topic) with(empty, --> is(aws_kms_key)) We also have a CLI tool (https://github.com/someengineering/fixctl) where you can use the raw json or yaml formatted results from the searches as an input into your pipelines. We also support full text search. For example, some developers like to tag their resources with their name: search “lukas” will produce a list of all resources that contain the string “lukas”. Full text search comes in handy when you want find a particular string (e.g. an IP address) across all your cloud accounts to figure out which account and region a resource is located in. There are existing security tools that use a graph, e.g. Wiz or Cisco with Lightspin (now Panoptica). Those enterprise tools have a few characteristics that we think make them less attractive for developers: - They require talking to a sales rep - They run you through a procurement process - They try to lock you into their platform Fix on the other hand is: - self-service sign-up with a free tier - available through the AWS Marketplace (coming soon) - open source We price Fix based on # of cloud accounts you collect data from, with a fair-usage limit of 200,000 (two hundred thousand) resources per account. Our lowest paid tier starts at $90 / month with three cloud accounts included. Fix Security is built with our open source project “Fix Inventory”: https://github.com/someengineering/fixinventory The open source has richer functionality than our SaaS app. It's multi-cloud and supports AWS, GCP, Azure, DigitalOcean, VMWare and Kubernetes. Over time, our plan is to support all these platforms in our SaaS app as well. Fix Inventory can update resources, including tags, and clean resources up based on age, usage, or policy non-compliance. Currently, this "mutating" function is not in the SaaS version. Fix Inventory is read-write, Fix Security is read-only. Fix Inventory was born in D2iQ (now Nutanix). It was Lukas' solution to managing and securing a growing cloud infrastructure. I would love your feedback on our solution. We’re here to help write your first queries. Just ping us on Discord (https://discord.gg/fixsecurity) and let us know you’re coming from HN. Also, I would love to hear what security tooling you use today and what you like / dislike about it. Cheers

mplete and resulted in a 80GB sqlite. I also added a very simple CLI interface (calling it virtual filesystem would be a stretch) that allows to load the sqlite file and browse the bucket content, summarise "directory" sizes, order by last modification date, etc. It's what starts when calling s3.py without the collect arg. Then there is delete.py which I used to delete objects from the bucket, including all versions (our horrible bucket was versioned which made it extra painful). On a versioned bucket it has to run twice, once to delete the file and once to delete the then created version, if I remember correctly - it's been a year since I built this. Maybe it's useful for someone.