Member-only story

Tried replacing the Cloud Custodian with Something else…

--

Couldn’t find a replacement of what Cloud Custodian can do today

After using the Cloud Custodian for over four years, the open-source community is really good at contributing and making it better in every release. The community has also introduced different scripts as they came across various issues like c7n-mailer, c7n-log-exporter, c7n-trailcreator, c7n-policystream, c7n-guardian, c7n-salactus, and others. Cloud Custodian is still missing the front end / UI where you can easily navigate the findings, single plane view of all the accounts you have from all of the public cloud providers, show checks on policy health, display various charts, and guidance to tell the story to the management.

Requirements

In order to check what’s out in the market and in an attempt to potentially replace Cloud Custodian, we put together our requirements of what we want from the product since we were clearly lagging a few things from Cloud Custodian. Below is the list of our basic requirements-

  1. Agentless and able to provide a single pane of glass view for all three public cloud providers.
  2. Able to choose our own attributes to draw the different types of graphs.
  3. Provide inventory at the account level. For example- display all the…

--

--

Aakif Shaikh, CISSP, CEH, CHFI, CISA, GWAPT
Aakif Shaikh, CISSP, CEH, CHFI, CISA, GWAPT

Written by Aakif Shaikh, CISSP, CEH, CHFI, CISA, GWAPT

Over 18 years of experience in a wide variety of technical domains within information security including information assurance, compliance, and risk management.

No responses yet