cloudmapper v2.9.1 releases: creates network diagrams of AWS environments
CloudMapper generates network diagrams of Amazon Web Services (AWS) environments and displays them via your browser. It helps you understand visually what exists in your accounts and identify possible network misconfigurations.
There are three stages of using CloudMapper:
- Collect information about an AWS account via a shell script that uses the AWS CLI.
- Convert that data into a format usable by the web browser.
- Run a simple webserver to view the collected data in your browser.
- #726 Checks ALBs to see if they’ve disabled the functionality that allows HTTP request smuggling. See https://portswigger.net/web-security/request-smuggling for more.
- #724 Check if Access Analyzer is enabled
- #722 Checks IMDSv2 is enabled
- #719 Checks if route53:ListHostedZonesByVPC to see if there are hosted zones from other accounts in the VPC
Bug fixes and other:
- #723 Fixes a bug where node data was not being included in the network visualization
- Fixes a bug introduced this morning where pip wouldn’t work.
- #721 Vendors added: Lucidchart, Emnify, Tenable, Stitch
Using the UI
- Pan and zoom can be done with the UI controls, or arrow keys and -/+ keys.
- Clicking on a node selects it (background turns yellow). Double-clicking a node makes its deleted neighbors visible again.
- Unselect a node by clicking on a new one, or holding shift and clicking on the selected node again.
- Holding down shift can be used to select multiple nodes. Holding shift, clicking, and dragging over an area, select all nodes that overlap that area.
- Click on a node and drag it to move it around.
- Delete (d): Select a node and click the eye with a slash through it to delete (ie. hide) it. Click the eye to undelete (unhide) all deleted nodes. All nodes connected to a deleted node will get a black border. If you double-click on a node with a black border, its deleted neighbors will be undeleted.
- Highlight (h): Select a node and click the symbol of the connected nodes to highlight the neighbors of a node. Click the inverse symbol to unhighlight the neighbors. Highlight neighbors makes it easier to see which nodes are connected.
- Collapse all: Click the icon of the arrows pointed toward each other to collapse all nodes. Click the symbol of the arrows pointed away to uncollapse all collapsed node.
- Collapse (c/e): The “minus” symbol will collapse a node, and the “plus” symbol will expand it.
- Randomize layout (r): The hammer symbol will randomly layout the diagram in a new way.
- Save image: The camera symbol will save a high-resolution image of the diagram. This is helpful when your diagram has many nodes such that you must be zoomed out, so a screenshot would not get the same level of detail.
- Import/Export: This will save the layout as a json file that you can then upload. This is helpful if you’ve moved nodes or made other changes and wish to “save” your work. Re-opening saved files does have some bugs.
When you first start, the initial layout is never ideal. We use what is believed to be the best layout algorithm for compound node diagrams, CoSE, but this will still require manual editing by moving nodes around.
Copyright 2018 Duo Security