$ show rams3sh/Aaia
Aaia is a security analysis tool for AWS IAM and Organizations that visualizes identity and access relationships in a Neo4j graph database. It collects AWS data via CLI commands, stores it as JSON, and loads it into Neo4j for graph-based querying and auditing. The architecture consists of a modular Python application with separate components for data collection, loading into Neo4j, and custom auditing modules. Key entry points include the main Aaia.py script, the Aaia_aws_collector.sh shell script for data gathering, and specialized action/module handlers. The data flow moves from AWS CLI → JSON files → Neo4j graph → analysis results via Cypher queries or custom modules. The tool depends on Neo4j (v3.5.17 compatible), AWS CLI, and several Python packages for policy processing and Neo4j interaction.
The LLM identified 1 files worth highlighting for reuse:
Contains sophisticated utility functions for parsing AWS IAM policy documents and statements. Handles complex policy syntax including Action/NotAction, Resource/NotResource distinctions, and policy expansion using the policyuniverse library. This isolated component solves a recurring AWS policy parsing problem and could be extracted for use in other projects with minimal modification (only requiring the policyuniverse dependency). Demonstrates non-obvious skill in correctly implementing AWS policy evaluation logic.