2.0.0: This is a completely new MetaHub!
New beginning: this version of MetaHub has created an entirely new, significantly better product.
Changelog Highlights:
- The
Meta Outputs
concept was deprecated entirely: There are no moreMetaTags
,MetaChecks
,MetaAccount
, andMetaTrail
as it was too many different things for doing almost the same, adding complexity to the code and making it more difficult to understand the product. - The new Context module will handle all those tasks together in a faster way, without code duplication, and much more efficiently.
- The module still executes four main processes:
config
(which includes associations),tags
,account
, andcloud trail
. This version enables by defaultconfig
andtags
; you can allow the other ones using the option--context.
- All the
MetaChecks
were migrated with new standardized names: We don't follow any more notations like:is_....
orits_attached_to.....
; this was very confusing and added a complexity layer. Now, for configurations, we use the name of the configuration parameter, and for associations, a dictionary for each resource type with the list of resources. - There is a new Impact module: This module executes after context and processes all that information.
- It then takes care of 3 critical tasks:
- For every affected resource, it will analyze five fundamental properties:
exposure
,access
,status
,encryption
, andenvironment
. - It will generate a findings metric based on the total amount of security findings and their severity for every resource.
- Based on the previous metric and the output of the critical properties, it will generate an Impact Scoring metric.
- The HTML output was refreshed entirely and can be used for a better understanding of this concept
Happy Hunting!