Tools
repokid
Netflix/repokid
Repokid uses AWS Access Advisor data to remove unused service permissions from IAM role policies. It is a least-privilege tool with scheduling, rollback, filters, and hooks for multi-account AWS environments.
Topics
Related projects
sops23.7kAn editor of encrypted files that supports YAML, JSON, ENV, and binary formats, using cloud KMS, age, or PGP keys to manage secrets safely.
prowler15.2kProwler is an open-source cloud security and compliance platform with thousands of built-in checks and compliance frameworks. It scans AWS, Azure, GCP, Kubernetes and other environments, offering a CLI, a self-hosted local server and AI-assisted capabilities.
steampipe8kSteampipe lets you query cloud APIs, code, and logs with SQL in real time, using plugins that map external services to Postgres tables without any ETL.
tfsec7.1ktfsec is a static analysis scanner that detects misconfigurations in Terraform code across major cloud providers, with hundreds of built-in rules and easy CI integration.
pacu5.4kAn open-source AWS exploitation framework for offensive security testing. Penetration testers use its pluggable modules to enumerate, escalate privileges, backdoor IAM users, and exfiltrate data from cloud environments.- cloudsploit3.8kCloudSploit is an open-source cloud security posture management scanner that audits AWS, Azure, GCP and other accounts for misconfigurations and compliance issues.