Aws Security
Showing 25 of 25 projects
An open-source cloud security platform that automates security and compliance assessments across AWS, Azure, GCP, and other cloud providers.
An open-source cloud security platform that automates security and compliance assessments across AWS, Azure, GCP, and other cloud providers.
A static code analysis tool that scans infrastructure as code, container images, and open source packages for security misconfigurations and vulnerabilities.
A static code analysis tool that scans infrastructure as code, container images, and open source packages for security misconfigurations and vulnerabilities.
An open-source Cloud Security Posture Management (CSPM) tool that scans AWS, Azure, GCP, Oracle, and GitHub for security misconfigurations.
A 'Vulnerable by Design' cloud deployment tool for creating and completing capture-the-flag style security scenarios on AWS and Azure.
Automatically generate least-privilege IAM policies for AWS based on resource ARNs and access levels.
Automatically generate least-privilege IAM policies for AWS by specifying resource ARNs and access levels.
A security tool that enumerates AWS S3 buckets to discover and download interesting files using wordlist-based scanning.
A vulnerable-by-design Terraform repository for learning cloud security misconfigurations across AWS, Azure, and GCP.
A collection of Python scripts for AWS penetration testing, reconnaissance, exploitation, and persistence.
A Terraform module to configure AWS accounts with a secure baseline aligned to CIS AWS Foundations and AWS Foundational Security Best Practices.
AWS incident response runbook templates for DoS/DDoS attacks, credential leakage, and S3 bucket access incidents.
An AWS IAM to least privilege Terraform execution framework that analyzes usage patterns and generates right-sized IAM configurations.
A framework for executing and detecting cloud attacker TTPs via YAML definitions, generating APIs, Sigma rules, and documentation.
A security tool for AWS that enforces resource ownership, detects domain hijacking, and verifies security services.
A proof-of-concept tool that spreads deceptive breadcrumbs and honeytokens across systems to lure attackers toward honeypots.
A vulnerable-by-design CloudFormation template for learning and testing infrastructure-as-code security scanning tools.
A Terraform module for provisioning AWS EFS (Elastic File System) with configurable security, DNS, and access points.
An open-source CLI scanner that finds AWS attack chains and provides copy-paste remediation with AWS CLI and Terraform.
A red team automation tool that simulates advanced attacker behavior in AWS environments for security testing.
Demo code for analyzing AWS CloudTrail and S3 logs using Apache Spark to detect security anomalies and enable SQL queries.
An oh-my-zsh plugin that simplifies AWS CLI MFA authentication and role assumption with TOTP support.
An AWS CDK construct that generates IAM managed policies and roles from JSON configuration files.
An oh-my-zsh plugin providing aliases and autocompletion for saml2aws to simplify AWS CLI authentication.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.