Schema-driven awesome list of cloud security guardrails powering cloudguardrail.com/tools
-
Updated
May 21, 2026 - JavaScript
#
iam-security
Here are 21 public repositories matching this topic...
Cloud security audit tools for AI agents — AWS, Azure, GCP misconfiguration detection via MCP. 38 tools, 60+ checks. The agent finds vulns, not you.
typescript mcp pentest aws-security privilege-escalation security-automation devsecops claude cloud-security azure-security misconfiguration gcp-security cspm ai-tools ai-agent cloud-audit llm-tools model-context-protocol mcp-server iam-security
-
Updated
Mar 14, 2026 - TypeScript
Visual IAM attack graph for AWS. Instantly analyze permissions, detect privilege-escalation risks, and audit IAM roles — locally, securely.
python docker security-audit aws-iam aws-security privilege-escalation devsecops attack-graph cloud-security-audit streamlit iam-security iam-visualization
-
Updated
Dec 18, 2025 - Python
Hands-on AWS security lab investigating a simulated cloud breach through CloudTrail log analysis. Traces complete attack chain from compromised IAM credentials through privilege escalation to S3 data exfiltration. Demonstrates forensic analysis, IAM security, and incident response techniques.
aws incident-response aws-cli cloud-computing threat-hunting cloudtrail aws-security security-analysis cloud-security blue-team s3-security cloud-forensics iam-security pwnedlabs
-
Updated
Mar 9, 2026
IAM Policy Analyzer & Fixer
python security authentication ci iam authorization aws-iam access-control security-scanner devsecops cloud-security least-privilege terrraform identity-access-management iam-security trust-policy policy-hygeine
-
Updated
May 16, 2026 - Python
Automated cloud-security detection and response framework for adaptive defense across AWS environments.
python aws automation detection sentinel infosec devsecops cloud-security s3-security iam-security adaptive-security
-
Updated
Nov 26, 2025 - Python
Event-driven AWS cloud security automation that detects IAM privilege escalation, alerts security teams via SNS, and supports governance-aware remediation using Terraform and Python.
python aws lambda terraform incident-response sns cybersecurity infrastructure-as-code boto3 cloudtrail security-automation devsecops cloud-security eventbridge iam-security
-
Updated
May 31, 2026 - HCL
Local-first AWS security auditor CLI that scans S3, EC2, IAM & RDS, maps findings to CIS/SOC2/HIPAA, and generates HTML reports with remediation commands.
cli golang aws security devops security-audit penetration-testing compliance hipaa aws-security devsecops cloud-security soc2 s3-security infrastructure-security cis-benchmarks iam-security cloud-auditor ec2-security rds-security
-
Updated
Apr 3, 2026
Python pipeline that ingests CloudTrail-style logs, runs 8 MITRE ATT&CK-mapped detection rules (T1078, T1098, T1110), and surfaces 43 severity-ranked findings in a Streamlit dashboard — replicating CSPM and SOC triage workflows.
python log-analysis cybersecurity siem aws-cloudtrail security-automation cloud-security mitre-attack threat-detection streamlit cspm iam-security
-
Updated
Apr 3, 2026 - Python
CIEM (Cloud Infrastructure Entitlement Management) platform for Zero Trust IAM - Excessive permissions detection, least-privilege scoring, and entitlement risk analysis
python security iam gcp google-cloud cybersecurity identity-management zero-trust least-privilege fastapi ciem iam-security cloud-entitlements excessive-permissions
-
Updated
Dec 7, 2025 - Python
Hybrid architecture for Tally backup and NAS modernization using Amazon S3 (Intelligent-Tiering), Amazon FSx for Windows, IPSec VPN connectivity, and encrypted offsite backups with monitoring via SNS.
aws vpn tally disaster-recovery amazon-s3 cost-optimization cloud-architecture backup-strategy infrastructure-modernization hybrid-cloud-it iam-security backup-architecture amazon-fsx
-
Updated
Feb 22, 2026
AWS penetration testing guide — IAM privilege escalation, S3, Lambda, EKS, cross-account attacks, privilege escalation paths
-
Updated
May 18, 2026
A curated list of cloud security tools for AWS, Azure, GCP, and Kubernetes
awesome cybersecurity penetration-testing infosec awesome-list aws-security security-tools devsecops cloud-security azure-security gcp-security kubernetes-security cspm cloud-native-security iam-security
-
Updated
Feb 9, 2026
Public-safe cloud detection engineering lab with synthetic AWS events, detections-as-code, expected alerts, runbooks, validation, and dashboard.
incident-response cybersecurity siem soc cloudtrail aws-security cloud-security portfolio-project blue-team threat-detection security-operations s3-security eks-security detection-engineering detection-as-code iam-security
-
Updated
Jun 7, 2026 - JavaScript
Defensive cloud infrastructure hardening lab using Python, synthetic Terraform-like, CloudFormation-like, Kubernetes, and generic config samples to detect cloud misconfigurations, score risk, provide safe remediation guidance, and generate Markdown/JSON reports with pytest, Ruff, GitHub Actions, and CodeQL.
python portfolio pytest ruff devsecops security-engineering cloud-security blue-team github-actions kubernetes-security infrastructure-security codeql cloud-hardening iam-security cloud-misconfiguration
-
Updated
Jun 5, 2026 - Python
Python CLI tool that scans live AWS accounts across S3, IAM, EC2, CloudTrail, and RDS, executing 26 CIS AWS Benchmark v1.5.0 checks and generating severity-scored HTML/JSON reports with a 0-100 security score.
-
Updated
Mar 19, 2026 - Python
AI-powered cloud security policy analyzer that detects IAM misconfigurations, policy conflicts, and attack paths using graph reasoning.
python risk-analysis cloud-computing policy-analysis security-automation cloud-security ai-security attack-graph misconfiguration-detection iam-security
-
Updated
Apr 30, 2026 - HTML
OSINT-based threat intelligence assessment analyzing phishing, brand impersonation, and identity-centric risks affecting an IAM provider.
osint cti soc threat-intelligence blue-team phishing-detection cyber-risk brand-impersonation iam-security
-
Updated
Feb 2, 2026
How to accidentally hack into AWS through IAM misconfigurations
-
Updated
Apr 26, 2026
Practical incident response playbooks for cloud, IAM, Kubernetes, and data exposure scenarios.
-
Updated
Mar 12, 2026
Improve this page
Add a description, image, and links to the iam-security topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the iam-security topic, visit your repo's landing page and select "manage topics."