Initial Scrivas AWS discovery deliverables
Read-only cloud discovery of the Scrivas AWS Organization (o-qfj0pvhhv7) to inform a proposal. - scripts/: boto3 org assessment, member-account assessment, fast discovery - findings/: self-contained HTML dashboards, written report, summary JSON, and the rendered Prowler benchmark report - docs/full_discovery_plan.md: phased full-discovery plan - index.html: landing page linking all reports - Pipfile/.python-version: reproducible pipenv env (Python 3.12.11) Large raw scans (OCSF JSON, CSV, compliance/) are git-ignored.
This commit is contained in:
Alvaro Del Valle
+101
@@ -0,0 +1,101 @@
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||
<title>Scrivas — AWS Discovery Reports</title>
|
||||
<style>
|
||||
:root{
|
||||
--bg:#eef0f3;--panel:#ffffff;--panel-2:#f7f8fa;--ink:#171d27;--ink-soft:#4a5563;
|
||||
--ink-faint:#79828f;--line:#dde1e7;--accent:#0d6e78;--accent-ink:#0a565e;
|
||||
--good:#2f8657;--warn:#b5832a;--crit:#bd463b;--warn-bg:#f8f1e2;
|
||||
--mono:ui-monospace,"SF Mono",Menlo,Consolas,monospace;
|
||||
--sans:ui-sans-serif,system-ui,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;
|
||||
--shadow:0 1px 2px rgba(20,26,38,.04),0 6px 20px -12px rgba(20,26,38,.18);
|
||||
}
|
||||
@media (prefers-color-scheme:dark){:root{
|
||||
--bg:#0d1117;--panel:#161c26;--panel-2:#1b222e;--ink:#e8ecf1;--ink-soft:#aab3c0;
|
||||
--ink-faint:#7c8695;--line:#28303c;--accent:#3bb4bf;--accent-ink:#8fdfe6;
|
||||
--good:#54b681;--warn:#d6a94a;--crit:#e26b60;--warn-bg:#251d10;
|
||||
--shadow:0 1px 2px rgba(0,0,0,.3),0 8px 24px -14px rgba(0,0,0,.6);}}
|
||||
*{box-sizing:border-box;}
|
||||
body{margin:0;background:var(--bg);color:var(--ink);font-family:var(--sans);line-height:1.5;-webkit-font-smoothing:antialiased;}
|
||||
.wrap{max-width:880px;margin:0 auto;padding:44px 24px 64px;}
|
||||
.eyebrow{font-size:11px;letter-spacing:.16em;text-transform:uppercase;color:var(--accent);font-weight:700;}
|
||||
h1{font-size:clamp(26px,4vw,36px);margin:6px 0 6px;letter-spacing:-.02em;font-weight:750;}
|
||||
.lede{color:var(--ink-soft);font-size:15px;max-width:60ch;}
|
||||
.meta{font-family:var(--mono);font-size:12px;color:var(--ink-faint);margin-top:10px;}
|
||||
.cards{display:grid;grid-template-columns:1fr 1fr;gap:16px;margin:30px 0 8px;}
|
||||
@media (max-width:680px){.cards{grid-template-columns:1fr;}}
|
||||
a.card{display:block;text-decoration:none;color:inherit;background:var(--panel);border:1px solid var(--line);
|
||||
border-radius:14px;padding:20px;box-shadow:var(--shadow);position:relative;overflow:hidden;transition:transform .12s,border-color .12s;}
|
||||
a.card:hover{transform:translateY(-2px);border-color:var(--accent);}
|
||||
a.card:focus-visible{outline:2px solid var(--accent);outline-offset:2px;}
|
||||
a.card::before{content:"";position:absolute;left:0;top:0;bottom:0;width:3px;background:var(--accent);}
|
||||
.card .k{font-family:var(--mono);font-size:11px;color:var(--accent);font-weight:700;letter-spacing:.04em;}
|
||||
.card h2{font-size:16px;margin:8px 0 6px;letter-spacing:-.01em;}
|
||||
.card p{font-size:13px;color:var(--ink-soft);margin:0;}
|
||||
.card .go{font-size:12px;color:var(--accent-ink);font-weight:600;margin-top:12px;display:inline-block;}
|
||||
.full{grid-column:1/-1;}
|
||||
.badge{display:inline-flex;align-items:center;gap:6px;font-size:10.5px;font-weight:700;padding:2px 8px;border-radius:999px;background:var(--warn-bg);color:var(--warn);margin-left:8px;vertical-align:middle;}
|
||||
.files{margin-top:26px;border-top:1px solid var(--line);padding-top:18px;}
|
||||
.files h3{font-size:12px;text-transform:uppercase;letter-spacing:.08em;color:var(--ink-faint);margin:0 0 10px;}
|
||||
.files ul{margin:0;padding:0;list-style:none;display:flex;flex-direction:column;gap:6px;}
|
||||
.files li{font-size:13px;}
|
||||
.files code{font-family:var(--mono);font-size:12px;color:var(--ink-soft);}
|
||||
.files a{color:var(--accent-ink);}
|
||||
.note{margin-top:24px;background:var(--warn-bg);border:1px solid color-mix(in srgb,var(--warn) 30%,transparent);
|
||||
border-radius:10px;padding:13px 16px;font-size:12.5px;color:var(--ink-soft);}
|
||||
.note b{color:var(--ink);}
|
||||
footer{margin-top:28px;font-size:12px;color:var(--ink-faint);font-family:var(--mono);}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<div class="wrap">
|
||||
<div class="eyebrow">Dasnuve · Cloud Discovery</div>
|
||||
<h1>Scrivas — AWS Discovery Reports</h1>
|
||||
<p class="lede">Read-only assessment of the Scrivas AWS Organization (<code>o-qfj0pvhhv7</code>) — footprint,
|
||||
security posture, cost, and Organizations governance. Prepared to inform a proposal.</p>
|
||||
<div class="meta">2 accounts · us-east-2 primary · generated 2026-08-19 · CONFIDENTIAL</div>
|
||||
|
||||
<div class="cards">
|
||||
<a class="card" href="findings/discovery_dashboard.html">
|
||||
<span class="k">FINDINGS</span>
|
||||
<h2>Discovery Findings</h2>
|
||||
<p>Resource footprint, security posture, cost baseline, and the CIS/SOC 2 benchmark summary.</p>
|
||||
<span class="go">Open dashboard →</span>
|
||||
</a>
|
||||
<a class="card" href="findings/assessment_dashboard.html">
|
||||
<span class="k">GOVERNANCE</span>
|
||||
<h2>Organizations Assessment</h2>
|
||||
<p>Delegated administrators, trust policies, and trusted access services across the org.</p>
|
||||
<span class="go">Open dashboard →</span>
|
||||
</a>
|
||||
<a class="card full" href="findings/prowler/prowler-output-716468089330-20260819124039.html">
|
||||
<span class="k">BENCHMARK</span>
|
||||
<h2>Prowler Full Report <span class="badge">needs internet</span></h2>
|
||||
<p>All 632 checks with per-framework compliance (CIS, SOC 2, ISO 27001, NIST, PCI). Interactive tables load styling from a CDN, so open this one online.</p>
|
||||
<span class="go">Open full benchmark →</span>
|
||||
</a>
|
||||
</div>
|
||||
|
||||
<div class="files">
|
||||
<h3>Written report & raw evidence</h3>
|
||||
<ul>
|
||||
<li><a href="findings/discovery_report.md">discovery_report.md</a> — narrative writeup <code>(renders on GitHub)</code></li>
|
||||
<li><code>findings/org_assessment_report.json</code> — org / trust / delegated-admin raw data</li>
|
||||
<li><code>findings/fast_discovery.json</code> — footprint, security, cost raw data</li>
|
||||
<li><code>findings/member_lazka_547868853286.json</code> — member account raw data</li>
|
||||
</ul>
|
||||
</div>
|
||||
|
||||
<div class="note">
|
||||
<b>Confidential — private repo only.</b> These reports contain AWS account IDs, role ARNs, external IDs, and live
|
||||
security findings for a prospective client. The large raw Prowler scans (<code>*.ocsf.json</code>, <code>*.csv</code>)
|
||||
are intentionally git-ignored; regenerate them with <code>pipenv run prowler aws …</code> if needed.
|
||||
</div>
|
||||
|
||||
<footer>Dasnuve · read-only discovery · reproduce via scripts/ + Pipfile</footer>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
Reference in New Issue
Block a user