Action Hero is a sidecar style utility to assist with creating least privilege IAM Policies for AWS.
🔗,
aws
iam
Amazon S3 Find and Forget is a solution to handle data erasure requests from data lakes stored on Amazon S3, for example, pursuant to the European General Data Protection Regulation (GDPR)
🔗,
aws
Automated Cloud Advisor is a extensible tool that aims at facilitating cost optimization in AWS, by collecting data for resources that are under utilized. In addition, this is a great learning tool for new DevOps/Cloud engineers that want to start automating things in AWS.
🔗,
aws
Open source application to instantly remediate common security issues through the use of AWS Config
🔗,
aws
Simple AWS Lambda powered Slack bot that reports your AWS Costs for the current month to a channel
🔗,
aws
A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster
🔗,
aws
iam
k8s
Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.
🔗,
aws
Bring AWS SSO-based credentials to the AWS SDKs until they have proper support
🔗,
aws
Script to automate initial triage/enumeration on a set of aws keys in an input file.
🔗,
aws
CdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
🔗,
aws
Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
🔗,
aws
declarative-infra
A set of tools to check AWS CloudFormation templates for policy compliance using a simple, policy-as-code, declarative syntax
🔗,
aws
declarative-infra
Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
🔗,
aws
iam
The AWS Copilot CLI is a tool for developers to build, release and operate production ready containerized applications on Amazon ECS and AWS Fargate.
🔗,
aws
containers
A CLI that utilizes Okta IdP via SAML to acquire temporary AWS credentials
🔗,
aws
Regula checks Terraform for AWS, Azure and GCP security and CIS compliance using Open Policy Agent/Rego
🔗,
terraform
azure
gcp
aws
declarative-infra
SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
🔗,
azure
aws
A command-line tool to get valuable information out of AWS CloudTrail
🔗,
aws