pike
Pike determines the minimum IAM permissions required to run OpenTofu/Terraform infrastructure code.
What is pike?
Pike is a tool that analyzes OpenTofu/Terraform code to determine the exact IAM permissions required to deploy cloud infrastructure. It solves the problem of over-permissive cloud access by generating minimum-required policies directly from Infrastructure as Code, helping teams implement least-privilege security.
Cloud engineers, DevOps teams, and security professionals managing Infrastructure as Code who need to enforce least-privilege IAM policies across AWS, GCP, or Azure environments.
Developers choose Pike because it automates the tedious process of manually calculating IAM permissions, reduces security risks from over-permissive policies, and integrates directly into existing Terraform/OpenTofu workflows with multi-cloud support.
Overview
Pike is a tool for determining the permissions or policy required for IAC code
Use Cases
Best For
- Generating least-privilege IAM policies for Terraform modules
- Auditing existing IAM roles against Infrastructure as Code requirements
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
