Tools
cloudsplaining
salesforce/cloudsplaining
Cloudsplaining is an AWS IAM security assessment CLI that finds least-privilege violations and produces a risk-prioritized HTML report.
Topics
Related projects
policy_sentry2.2kPolicy Sentry is a CLI and Python library that generates least-privilege AWS IAM policies from resource ARNs and access levels, helping teams avoid hand-writing overly broad permissions.
cloudfox2.6kA command-line tool for cloud penetration testing that enumerates AWS, Azure and GCP resources, permissions and trust relationships to uncover exploitable attack paths.
steampipe8kSteampipe lets you query cloud APIs, code, and logs with SQL in real time, using plugins that map external services to Postgres tables without any ETL.
pacu5.4kAn open-source AWS exploitation framework for offensive security testing. Penetration testers use its pluggable modules to enumerate, escalate privileges, backdoor IAM users, and exfiltrate data from cloud environments.
cloudsploit3.8kCloudSploit is an open-source cloud security posture management scanner that audits AWS, Azure, GCP and other accounts for misconfigurations and compliance issues.- powerpipe526Code-based dashboards for DevOps teams to visualize cloud infrastructure and run compliance benchmarks.