Akamai Account Audit

This project is to create a site-audit tool for accessing Akamai related details.

As part of Phase 1, we are targeting only Propert Manager (PAPI) and per host App security summary.

Usage

• In your ~/.edgerc file setup the credentials under the name papi or provide the section name with '--section'.
• Ensure you have python 3.x.
• As a pre-installation step, please add the libraries that are required.

pip install -r requirements.txt

Depending on the number of configurations you have, this report can take at least 30 minutes to execute. Assume that it'll need about an hour - so ensure that your machine does not sleep during the time to help complete the execution of the script.

Argument	Purpose
--type [as|os]	[OPTIONAL] as: Account Summary (default), os: Offload Summary
--switchKey	[OPTIONAL] Allows Akamai employees and some partners to run the code on other accounts they can manage by indicating the Account ID to Audit. Account ID found here: https://control.akamai.com/apps/ids-resources/#/accounts/current
--verbose	[OPTIONAL] Print Additional details
--section	[OPTIONAL] Section to use within the .edgerc file

Account Summary/Snapshot

python3 akamai-audit.py --type as

Offload Analysis

python3 akamai-audit.py --type os --groupby ext

Har Analysis

python3 akamai-audit.py --type har --file /path/to/file.har --domain

Account Summary

When this program is run, it will create a folder within the current directory under the name "Account_Name". Within this folder, following files will be created:

Sheet Name	Purpose
Host Summary	Provides high level summary for each hostname under all PM Configurations and their App sec protection.
contracts	Lists all the contracts in the account.
groups	Lists all the groups in the account.
cpcodes	Lists all the CP Codes in the account.
hostnames	Pulls all the host names listed within the configurations. It will also list if the domain is CNAMED to Akamai, slot and compare with the CNAME listed in the configuration.
certs	Lists all the enrollments in the account and their corresponding slot.
edgehostnames	Lists of all edge host names associated with this account
properties	Lists all the properties associated with the account. For each property, it will list the following details: Property name, Current version in prod and staging, latest version and first version details. Finally, it lists all the behaviors seen in the config.
propertyBehavior	Lists all behaviors available for each property (based on property type) and checks for their use.
origins	Lists all the unique origin names defined within the configurations. It will also segregate as Customer origin or GTM Origin
secConfigs	Lists all the WAF security configurations in the account.
secMatch	Lists all the WAF security configuration match targets in the account.
secConfigbyHost	Lists all hostnames and corresponding configurations nd match policies.

Example Output can be found here!

Offload Summary

This mode will collect offload data from the CPcodes provided in '--cpcodes' or if not provided it will do a account wide review of all CPcodes. If no dates are provided it defaults to the last month.

The data collected provides a total summary that provide a quick view on the total offload for each CPcode, the perc (percentage) of traffic that each CPcode represents to the total hits of all CPcodes reviewed and a extension offload summary for each of the CPcodes.

Summary	by Cpcode

python3 akamai-audit.py --type os --start 2020-10-01 --end 2020-11-01 --cpcodes 123456 234567 345678

Argument	Purpose
--start	[OPTIONAL] Start Date in the format 'YYYY-MM-DD'. If not provided default is last month's traffic.
--end	[OPTIONAL] End Date in the format 'YYYY-MM-DD'. If not provided default is last month's traffic.
--cpcodes	[OPTIONAL] List of cpcodes to query (space-delimited). If not provided, an account-wide analysis will be done.
--groupby [ext|url]	[OPTIONAL] By default this report aggregates by URL extension but in many cases like API's, we will not have extensions. For those cases, we can aggregate by URLs.

Example Output: By Ext Example Output: By Ext

HTTP-Archive(HAR) Summary

This mode will provide a summary of all the request in the provided HAR file. The if pragma headers are included in request you will have Akamai specific columns like cachekey, TTL

Sample Command:

python3 akamai-audit.py  --type har --domain roymartinez.dev --file ~/Desktop/roymartinez.dev.har 

Argument	Purpose
--file	[REQUIRED] File location to be analysed.
'--domain	[REQUIRED] will be appended to this list. If only one domain is in question, --domain is all you need.
--first-parties	[OPTIONAL] List of first party domains --domain will be appended to this list. If only one domain is in question, --domain is all you need. Used only in Har Analysis.