security-monkey-netflix

Security Monkey: Controla la seguridad de AWS con Netflix (parte 1)

Supongo que todos conocéis Netflix a estas alturas, el servicio VOD con suscripción mensual que aterrizó en España hace unos meses y ya es todo un éxito.

Pero, además de ser una forma estupenda de ver películas y series, puede ofrecernos mucho que aprender gracias a lo que algunos (yo no :D) llaman pornografía tecnológica.

Netflix es una de esas empresas que se rodea de los mejores ingenieros para poder ofrecer un servicio con calidad por encima de lo normal. En ese sentido, leer de forma regular «The Netflix Tech Blog» es altamente recomendable.

 

Aprendiendo de los mejores

Que profesionales tan altamente cualificados como los que trabajan en Neflix dediquen una parte de su tiempo a contarnos cómo hacen las cosas, es algo de agradecer. Vivimos en un mundo en el que estamos obligados a aprender de forma contínua y este tipo de lecturas nos abren la mente a nuevas formas de hacer las cosas.

Puedes encontrar temas tan interesantes como:

Y sobre todo, en general de elementos de Amazon WS (unos servicios con los que suelo trabajar tal y como os conté en Controla lo que hacen tus usuarios con Amazon WS IAM (parte 1) y Controla lo que hacen tus usuarios con Amazon WS IAM (parte 2)).

aws-summit-1

 

Security Monkey

Revisando esto, me he encontrado con una solución desarrollada por el equipo Netflix que tiene por objetivo monitorizar y analizar la seguridad de los servicios de AWS.

Se trata de un desarrollo propio que ofrecen como open source y que nos permite monitorizar la configuración de los servicios EC2, RDS, S3 e IAM. Cualquier cambio que se realice sobre ellos quedará registrado para que tengamos el control de todo lo que sucede.

Está pensada para correr sobre una máquina Linux y almacenar la información en una PostgreSQL. A nivel tecnológico está escrita en Python utilizando el framework Flask, utilizando datos JSON servidos mediante una API REST.

Casos de uso típicos serían:

  • Visualización de cambios históricos de un elemento (como los cambios en grupos de seguridad).
  • Auditorías de configuraciones incorrectas (como permisos en buckets S3).

Para conseguir esto, Security Monkey cuenta con tres componentes principales:

  • Watcher, es el encargado de observar nuestra cuenta para detectar cambios. Cuando eso ocurre, se almacena esa información en la base de datos interna.
  • Notifier, es el encargado de avisarnos cuando se produce un evento que podemos personalizar.
  • Auditor, es el encargado de realizar pruebas y revisiones sobre los elementos, reglas y políticas. Podemos definir aquello que no queremos que ocurra para que salte una alarma si se encuentra (como grupos de seguridad con puertos abiertos al mundo).

Una vez lo tengamos funcionando podremos acceder mediante su interfaz web, configurar los elementos que queremos monitorizar y ver todo en detalle.

 

¿Te ha gustado tanto como a mi? Entonces descarga el proyecto desde su repositorio y coméntanos qué tal tu experiencia. Yo lo haré en un post en el que os mostraré el proceso de instalación, configuración y uso. De momento, esto es todo, espero que os esté resultando interesante.

Como siempre digo, si ves algún error, no estás de acuerdo con lo que cuento o quieres hacer alguna aportación, no dudes en pasarte por los comentarios.

Cristóbal Espinosa
110 comentarios
  1. Tampa St: Peterburg
    Tampa St: Peterburg Dice:

    Hello there! This post could not be written much better! Looking through this article reminds me of my previous roommate! He continually kept talking about this. I will send this post to him. Pretty sure he will have a very good read. Thank you for sharing!

  2. Flum pebble
    Flum pebble Dice:

    Oh my goodness! Incredible article dude! Thank you, However I am having problems with your RSS. I don’t understand the reason why I am unable to join it. Is there anyone else getting identical RSS issues? Anybody who knows the solution can you kindly respond? Thanx.

  3. navratri chaniya choli
    navratri chaniya choli Dice:

    Nice post. I learn something new and challenging on websites I stumbleupon every day. It will always be interesting to read articles from other writers and practice something from other websites.

  4. Cimarron Pistolero Revolver
    Cimarron Pistolero Revolver Dice:

    Hi, I do believe this is a great website. I stumbledupon it 😉 I will come back yet again since i have bookmarked it. Money and freedom is the greatest way to change, may you be rich and continue to guide other people.

  5. Diwali snacks
    Diwali snacks Dice:

    Oh my goodness! Incredible article dude! Thank you so much, However I am going through problems with your RSS. I don’t understand why I am unable to join it. Is there anybody having the same RSS problems? Anyone who knows the solution can you kindly respond? Thanx.

  6. ngentot
    ngentot Dice:

    Greetings! Very helpful advice in this particular article! It is the little changes that make the greatest changes. Many thanks for sharing!

  7. nude girl
    nude girl Dice:

    That is a great tip particularly to those fresh to the blogosphere. Short but very accurate info… Thanks for sharing this one. A must read article!

  8. iptv
    iptv Dice:

    I truly love your site.. Great colors & theme. Did you make this web site yourself? Please reply back as I’m hoping to create my own site and would like to know where you got this from or what the theme is named. Thank you!

  9. iptv
    iptv Dice:

    Hi, I do think this is an excellent blog. I stumbledupon it 😉 I am going to come back once again since I book-marked it. Money and freedom is the best way to change, may you be rich and continue to guide other people.

  10. iptv
    iptv Dice:

    Howdy! I simply would like to give you a big thumbs up for the great info you’ve got here on this post. I will be coming back to your website for more soon.

  11. iptv
    iptv Dice:

    I want to to thank you for this good read!! I absolutely loved every little bit of it. I’ve got you book marked to look at new stuff you post…

  12. iptv
    iptv Dice:

    Your style is so unique in comparison to other people I’ve read stuff from. I appreciate you for posting when you have the opportunity, Guess I’ll just book mark this blog.

  13. iptv
    iptv Dice:

    Way cool! Some extremely valid points! I appreciate you writing this article and the rest of the website is also very good.

  14. M88
    M88 Dice:

    Good day! I just want to give you a big thumbs up for your excellent info you have got right here on this post. I will be returning to your website for more soon.

  15. shakibalhasan
    shakibalhasan Dice:

    I’m impressed, I have to admit. Seldom do I come across a blog that’s both equally educative and amusing, and let me tell you, you have hit the nail on the head. The issue is something not enough people are speaking intelligently about. Now i’m very happy that I found this in my search for something relating to this.

  16. rikviptours
    rikviptours Dice:

    Aw, this was a really good post. Taking the time and actual effort to generate a really good article… but what can I say… I hesitate a lot and never seem to get nearly anything done.

  17. mibet
    mibet Dice:

    I needed to thank you for this good read!! I certainly loved every bit of it. I have got you saved as a favorite to look at new things you post…

  18. mibet
    mibet Dice:

    After looking over a handful of the blog posts on your web page, I honestly appreciate your way of writing a blog. I book-marked it to my bookmark site list and will be checking back soon. Take a look at my web site as well and let me know your opinion.

  19. iptv
    iptv Dice:

    I would like to thank you for the efforts you have put in writing this site. I am hoping to check out the same high-grade blog posts from you later on as well. In fact, your creative writing abilities has motivated me to get my own, personal site now 😉

  20. top88bet
    top88bet Dice:

    An outstanding share! I’ve just forwarded this onto a friend who had been conducting a little homework on this. And he actually ordered me breakfast simply because I stumbled upon it for him… lol. So allow me to reword this…. Thanks for the meal!! But yeah, thanks for spending time to talk about this subject here on your internet site.

  21. Sohaib mufti
    Sohaib mufti Dice:

    You made some really good points there. I checked on the internet to learn more about the issue and found most individuals will go along with your views on this website.

  22. skate pants suppliers
    skate pants suppliers Dice:

    After I initially left a comment I seem to have clicked on the -Notify me when new comments are added- checkbox and now whenever a comment is added I receive 4 emails with the exact same comment. There has to be an easy method you can remove me from that service? Kudos.

  23. Whitescreen57
    Whitescreen57 Dice:

    Your style is very unique in comparison to other folks I have read stuff from. Thanks for posting when you’ve got the opportunity, Guess I will just book mark this web site.

  24. porn
    porn Dice:

    Howdy! This blog post could not be written much better! Going through this post reminds me of my previous roommate! He always kept talking about this. I will send this post to him. Fairly certain he will have a very good read. Thanks for sharing!

  25. cam sex
    cam sex Dice:

    Howdy! This post couldn’t be written any better! Looking at this post reminds me of my previous roommate! He constantly kept preaching about this. I will send this information to him. Fairly certain he will have a very good read. I appreciate you for sharing!

  26. fun88
    fun88 Dice:

    I’d like to thank you for the efforts you’ve put in writing this website. I really hope to check out the same high-grade blog posts by you later on as well. In fact, your creative writing abilities has encouraged me to get my own site now 😉

  27. shopdecordeals
    shopdecordeals Dice:

    I absolutely love your blog.. Pleasant colors & theme. Did you build this amazing site yourself? Please reply back as I’m looking to create my very own website and want to find out where you got this from or exactly what the theme is called. Appreciate it!

  28. old-time radio eddie cantor
    old-time radio eddie cantor Dice:

    Right here is the perfect blog for anybody who really wants to understand this topic. You know so much its almost tough to argue with you (not that I personally would want to…HaHa). You certainly put a brand new spin on a subject that has been discussed for a long time. Excellent stuff, just great.

  29. Vacation
    Vacation Dice:

    You’ve made some really good points there. I looked on the net to find out more about the issue and found most people will go along with your views on this web site.

  30. bobres-iptv
    bobres-iptv Dice:

    You made some decent points there. I checked on the web for additional information about the issue and found most people will go along with your views on this site.

  31. Online Casino Malaysia
    Online Casino Malaysia Dice:

    Right here is the right website for anyone who wishes to understand this topic. You understand a whole lot its almost tough to argue with you (not that I really will need to…HaHa). You certainly put a fresh spin on a topic that’s been written about for ages. Excellent stuff, just wonderful.

  32. Escorts Near Me
    Escorts Near Me Dice:

    I was more than happy to uncover this page. I need to to thank you for ones time due to this fantastic read!! I definitely really liked every little bit of it and i also have you book marked to see new things on your web site.

  33. ounce of weed
    ounce of weed Dice:

    I was pretty pleased to discover this website. I wanted to thank you for your time for this particularly fantastic read!! I definitely liked every bit of it and I have you saved as a favorite to look at new things in your web site.

  34. clark forklifts parts
    clark forklifts parts Dice:

    I’m very pleased to discover this web site. I wanted to thank you for ones time for this particularly fantastic read!! I definitely loved every bit of it and i also have you saved as a favorite to look at new stuff in your site.

  35. sky88
    sky88 Dice:

    Your style is unique in comparison to other people I’ve read stuff from. Thanks for posting when you have the opportunity, Guess I’ll just bookmark this page.

  36. sunwin
    sunwin Dice:

    The next time I read a blog, Hopefully it does not disappoint me as much as this particular one. After all, I know it was my choice to read through, however I actually believed you’d have something helpful to talk about. All I hear is a bunch of whining about something that you could fix if you were not too busy searching for attention.

  37. 에볼루션 게이밍
    에볼루션 게이밍 Dice:

    I blog frequently and I seriously appreciate your content. Your article has truly peaked my interest. I will bookmark your site and keep checking for new details about once per week. I subscribed to your RSS feed too.

  38. Bedpage
    Bedpage Dice:

    Aw, this was an extremely good post. Taking a few minutes and actual effort to create a great article… but what can I say… I put things off a lot and don’t manage to get anything done.

  39. Secure and privacy PDF
    Secure and privacy PDF Dice:

    I’d like to thank you for the efforts you have put in penning this blog. I’m hoping to see the same high-grade blog posts by you later on as well. In fact, your creative writing abilities has encouraged me to get my own, personal website now 😉

  40. Backlink Gratis
    Backlink Gratis Dice:

    An outstanding share! I’ve just forwarded this onto a colleague who was doing a little research on this. And he actually ordered me breakfast because I stumbled upon it for him… lol. So allow me to reword this…. Thanks for the meal!! But yeah, thanks for spending some time to discuss this issue here on your web site.

  41. acheter permis moto
    acheter permis moto Dice:

    Next time I read a blog, Hopefully it doesn’t disappoint me just as much as this particular one. After all, I know it was my choice to read, but I really believed you’d have something helpful to say. All I hear is a bunch of complaining about something that you could fix if you weren’t too busy seeking attention.

  42. pabriktoto
    pabriktoto Dice:

    An outstanding share! I have just forwarded this onto a colleague who had been conducting a little research on this. And he actually bought me breakfast simply because I found it for him… lol. So allow me to reword this…. Thanks for the meal!! But yeah, thanx for spending the time to talk about this matter here on your web page.

  43. ワーホリ
    ワーホリ Dice:

    You are so cool! I don’t think I’ve truly read something like this before. So wonderful to find someone with original thoughts on this topic. Seriously.. many thanks for starting this up. This website is one thing that is needed on the internet, someone with some originality.

  44. caluanie muelear oxidize manufacturer
    caluanie muelear oxidize manufacturer Dice:

    The next time I read a blog, Hopefully it does not disappoint me just as much as this one. After all, Yes, it was my choice to read, nonetheless I genuinely believed you would have something helpful to say. All I hear is a bunch of complaining about something that you could possibly fix if you were not too busy seeking attention.

  45. BedPage Washington DC
    BedPage Washington DC Dice:

    Can I simply just say what a relief to uncover somebody that actually knows what they’re discussing online. You actually realize how to bring a problem to light and make it important. More people ought to look at this and understand this side of your story. I can’t believe you aren’t more popular since you surely have the gift.

  46. linetogel link alternatif
    linetogel link alternatif Dice:

    I absolutely love your blog.. Very nice colors & theme. Did you make this site yourself? Please reply back as I’m planning to create my own personal blog and want to find out where you got this from or exactly what the theme is named. Appreciate it!

  47. Free Local Classified Ads
    Free Local Classified Ads Dice:

    Can I just say what a comfort to uncover someone who genuinely knows what they’re talking about on the net. You actually realize how to bring a problem to light and make it important. More people must read this and understand this side of the story. I can’t believe you aren’t more popular because you certainly have the gift.

  48. bokep jepang
    bokep jepang Dice:

    An interesting discussion is definitely worth comment. There’s no doubt that that you need to publish more on this subject matter, it may not be a taboo matter but typically people do not discuss these topics. To the next! Cheers.

  49. mosaic-lamps
    mosaic-lamps Dice:

    Oh my goodness! Incredible article dude! Thank you, However I am experiencing issues with your RSS. I don’t understand why I cannot join it. Is there anyone else getting the same RSS issues? Anybody who knows the answer can you kindly respond? Thanx.

  50. bokep sma
    bokep sma Dice:

    After I originally left a comment I seem to have clicked the -Notify me when new comments are added- checkbox and now each time a comment is added I recieve 4 emails with the same comment. Perhaps there is an easy method you can remove me from that service? Kudos.

  51. bokep indo
    bokep indo Dice:

    This is the right web site for everyone who wants to understand this topic. You understand so much its almost hard to argue with you (not that I really would want to…HaHa). You certainly put a fresh spin on a topic which has been discussed for many years. Great stuff, just great.

  52. bokep sma
    bokep sma Dice:

    Having read this I thought it was rather informative. I appreciate you finding the time and energy to put this informative article together. I once again find myself spending way too much time both reading and commenting. But so what, it was still worth it!

  53. Functional Anatomy
    Functional Anatomy Dice:

    I was extremely pleased to find this site. I want to to thank you for your time for this particularly fantastic read!! I definitely really liked every part of it and i also have you saved to fav to see new information in your blog.

  54. ซีรี่ย์จีน123
    ซีรี่ย์จีน123 Dice:

    After I originally commented I appear to have clicked the -Notify me when new comments are added- checkbox and from now on every time a comment is added I get four emails with the same comment. Is there a means you are able to remove me from that service? Cheers.

Los comentarios están desactivados.