An authorization library that supports access control models like ACL, RBAC, ABAC in Golang: https://discord.gg/S5UjpzGZjN

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

A secure low code honeypot framework, leveraging LLM for System Virtualization.

Cloudlist is a tool for listing Assets from multiple Cloud Providers.

Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.

LC（List Cloud）是一个多云攻击面资产梳理工具

一款帮助云租户发现和测试云上风险、增强云上防护能力的综合性开源工具

rpCheckup is an AWS resource policy security checkup tool that identifies public, external account access, intra-org account access, and private resources.

Static analysis for CloudFormation templates to identify common misconfiguration

Terraform provider for Policy Sentry (IAM least privilege generator and auditor)

Multi Cloud Antivirus Scanning API using YARA and CLAMAV for AWS S3, Azure Blob Storage and GCP Cloud Storage

Scrape the IP ranges of cloudproviders and check if a IP belongs to a particular CloudProvider. This can also help to speed up your CSIRT activities

Hashicorp Vault Plugin to support Intel SGX attestation

AWS hardening tools

CFNi - Cloudformation injection