Tools
tfsec
aquasecurity/tfsec
tfsec is a static analysis scanner that detects misconfigurations in Terraform code across major cloud providers, with hundreds of built-in rules and easy CI integration.
Topics
Related projects
sops23.7kAn editor of encrypted files that supports YAML, JSON, ENV, and binary formats, using cloud KMS, age, or PGP keys to manage secrets safely.
steampipe8kSteampipe lets you query cloud APIs, code, and logs with SQL in real time, using plugins that map external services to Postgres tables without any ETL.
cloudsploit3.8kCloudSploit is an open-source cloud security posture management scanner that audits AWS, Azure, GCP and other accounts for misconfigurations and compliance issues.- powerpipe526Code-based dashboards for DevOps teams to visualize cloud infrastructure and run compliance benchmarks.
ScoutSuite7.9kMulti-Cloud Security Auditing Tool
terraform-aws-secure-baseline1.2kA Terraform module that hardens an AWS account to CIS and AWS Foundational Security baselines, covering IAM, logging, monitoring, networking, and encryption defaults.