Tools
policy_sentry
salesforce/policy_sentry
Policy Sentry is a CLI and Python library that generates least-privilege AWS IAM policies from resource ARNs and access levels, helping teams avoid hand-writing overly broad permissions.
Topics
Related projects
cloudsplaining2.3kCloudsplaining is an AWS IAM security assessment CLI that finds least-privilege violations and produces a risk-prioritized HTML report.
steampipe8kSteampipe lets you query cloud APIs, code, and logs with SQL in real time, using plugins that map external services to Postgres tables without any ETL.
pacu5.4kAn open-source AWS exploitation framework for offensive security testing. Penetration testers use its pluggable modules to enumerate, escalate privileges, backdoor IAM users, and exfiltrate data from cloud environments.
cloudsploit3.8kCloudSploit is an open-source cloud security posture management scanner that audits AWS, Azure, GCP and other accounts for misconfigurations and compliance issues.
cloudfox2.6kA command-line tool for cloud penetration testing that enumerates AWS, Azure and GCP resources, permissions and trust relationships to uncover exploitable attack paths.- powerpipe526Code-based dashboards for DevOps teams to visualize cloud infrastructure and run compliance benchmarks.