CrowdStrike CWP / Horizon Benchmark Utilities

These utilities have been developed to assist you in calculating the overall size of a cloud deployment.

Running an audit

The benchmark.sh entrypoint script helps you to perform sizing calculations for your cloud resources. It detects the cloud provider (AWS, Azure, or GCP) and downloads the necessary scripts to perform the calculation. You can also pass one or more cloud providers as arguments.

Configuration

The script recognizes the following environmental variables for AWS:

| Variable | Default | Description | | :--- | :--- | :--- | | AWS_ASSUME_ROLE_NAME | OrganizationAccountAccessRole | IAM role name for cross-account access | | AWS_REGIONS | All regions | Comma-separated list of regions to scan | | AWS_THREADS | 5 | Number of concurrent account threads | | AWS_BATCH_SIZE | 20 | Accounts processed per batch | | AWS_BATCH_DELAY | 30 | Seconds to wait between batches | | AWS_API_DELAY | 0.1 | Seconds to wait between API calls | | AWS_MAX_RETRIES | 5 | Maximum retry attempts for failed operations | | AWS_OPERATION_TIMEOUT | 300 | Timeout for individual operations (seconds) | | AWS_RESUME_FILE | aws_benchmark_progress.json | Progress tracking file | | AWS_SKIP_ACCOUNTS | None | Comma-separated list of account IDs to skip | | AWS_DRY_RUN | false | Set to true to simulate without API calls |

To use, please export variables in your environment prior to running the script:

shell export AWS_ASSUME_ROLE_NAME="Example-Role-Name"

Note: see AWS Readme for detailed configuration options.

Usage

shell ./benchmark.sh [aws|azure|gcp]...

Below are two different ways to execute the script.

In Cloud Shell

To execute the script in your environment using Cloud Shell, follow the appropriate guide based on your cloud provider:

• AWS
• Azure
• GCP

In your Local Environment

For those who prefer to run the script locally, or would like to run the script against more than one cloud provider at a time, follow the instructions below:

Requirements

• Python 3
• pip
• curl
• Approprate cloud provider CLI (AWS, Azure, GCP)

Steps

1. Download the script:

   shell curl -O https://raw.githubusercontent.com/CrowdStrike/cloud-resource-estimator/main/benchmark.sh

2. Set execution permissions:

   shell chmod +x benchmark.sh

3. Example: Run the script against AWS and Azure:

   shell ./benchmark.sh aws azure

Alternatively, you can run the script directly from the URL:

• Run the script against AWS and Azure:

  shell curl https://raw.githubusercontent.com/CrowdStrike/cloud-resource-estimator/main/benchmark.sh | bash -s -- aws azure

• Run the script and let it determine the available cloud providers:

  shell curl https://raw.githubusercontent.com/CrowdStrike/cloud-resource-estimator/main/benchmark.sh | bash

Development

Please review our Developer Guide for more information on how to contribute to this project.

License

These scripts are provided to the community, for free, under the Unlicense license. As such, these scripts carry no formal support, express or implied.

Questions?

Please review our Code of Conduct and then submit an issue or pull request. We will address the issue as quickly as possible.