- Service Account Setup
- Prowler Installation
- ScoutSuite Installation
- RoR Installation
- Running the cloud-auditor App
Example setup the runtime environment in Ubuntu 18.0.4 Linux distribution
Cloud Auditor app requires Ruby on Raills (RoR) 2.5.x, MariaDB v10.4.x database, Nginx 1.x web server, the NCC ScoutSuite software, Prowler software, in order to run properly.
To start, we'll create a service account "deploy" for the Rails app running environment. We'll add the service account to the special group 'wheel', which is allowed to have 'sudo' access.
# adduser deploy
# addgroup wheel
# usermod -aG wheel deployTBD
TBD
RoR is built on top of Ruby programming language. Before installation of RoR, you need to setup the right Ruby environment. This project code base was developed under Ruby 2.5.1. But it should run in latest stable Ruby environment, with some small tweaks. Without going into the Ruby / RoR ecosystem complexity, let's stick with Ruby 2.5.1 for simplicity purpose.
First of all, you would need a Ruby package manager. Either Rbenv or RVM shoudl work. I chosed RVM in my development environment. Refer to RVM Website for more information.
$ gpg2 --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3 7D2BAF1CF37B13E2069D6956105BD0E739499BDB
$ \curl -sSL https://get.rvm.io | bash -s stableSecondarily, once RVM is successfully installed, you would need to download the right Ruby distribution. In my development environment, here is what I do:
$ rvm install 2.5.1Thirdly, once Ruby environment is setup, you can proceed to download the project and install the RoR runtime:
$ git clone https://github.com/yangsec888/cloud-auditor.git
$ cd cloud-auditor
$ bundle install
$ rake db:create
$ rake db:migration
$ rails serverPointing your browser to http://://localhost:3000/ You should be able to see cloud-auditor logon page.