Configuring and running Scout Suite

Now that our vulnerable AWS infrastructure has been set up, it's time to configure and run Scout Suite. Scout Suite is an automated cloud security auditing tool that helps us assess and identify security misconfigurations. It collects configuration data from the APIs that are exposed by cloud providers and produces a report that highlights potentially vulnerable configurations. The tool works across multiple cloud providers such as AWS, Azure, and Google Cloud Platform (GCP).

Setting up the tool

To run the tool on our AWS infrastructure, we will have to set up an IAM user with specific permissions to configure the tool:

1. Start by going to IAM | Users.
2. Click on the Add user button,...