Finding Infrastructure Issues in AWS for Free

Ensuring a secure and well-architected cloud infrastructure is crucial for any organization. However, identifying issues within AWS infrastructure can be challenging, especially when working with budget constraints. In this guide, we explore a free method to identify infrastructure issues using IriusRisk and Hava.io.

Method 2: Automatic AWS Architecture Modeling using IriusRisk and Hava.io

For an automated approach, we can use IriusRisk and Hava.io to generate an architecture diagram and identify infrastructure issues.

Step 1: Ensure Required IAM Permissions

Before proceeding, ensure that you have the following AWS IAM permissions assigned to your account:

• ViewOnlyAccess

• SecurityAudit

These permissions allow you to fetch architecture details without modifying AWS resources.

Step 2: Fetch AWS Architecture Using Hava.io

1. Sign up and log in to Hava.io

   • Visit Hava.io

   • Create an account and log in.

2. Connect AWS Account

   • Click on Cloud AWS

   • Enter your IAM Access Key and Secret Key

   • Fetch the architecture of your AWS environment.

3. Capture the Architecture Diagram

   • Note that Hava.io does not allow downloading the generated diagram.

   • Take a screenshot of the architecture diagram for later use.

Step 3: Manually Recreate the Architecture in IriusRisk

1. Sign up and log in to IriusRisk

   • Visit IriusRisk

   • Create an account and log in.

2. Manually Create the AWS Architecture

   • Using the screenshot taken from Hava.io, manually replicate the AWS infrastructure inside IriusRisk.

3. Generate the Security Report

   • Once the architecture is recreated, IriusRisk will analyze the setup and generate a report highlighting infrastructure security issues.

Step 4: Review the Infrastructure Issues Report

• IriusRisk provides a detailed report outlining security vulnerabilities and potential improvements in your AWS setup.

• Use these insights to enhance security, optimize architecture, and mitigate risks.

Conclusion

This method provides an efficient, cost-free way to analyze and identify potential infrastructure issues in AWS. By leveraging Hava.io for visualization and IriusRisk for security analysis, organizations can gain valuable insights without incurring additional costs.

---

Would you like to explore additional free tools for AWS security analysis? Let us know in the comments!