Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
awesome-cloud-security
🛡️ Awesome Cloud Security Resources ⚔️
https://github.com/4ndersonLin/awesome-cloud-security
- CSA STAR
- ISO/IEC 27017:2015
- ISO/IEC 27018:2019
- MTCS SS 584
- CIS Benchmark
- aws_pwn
- aws_ir
- aws-firewall-factory
- aws-vault
- awspx - based tool for visualizing effective access and resource relationships within AWS.
- azucar
- checkov - as-code.
- cloud-forensics-utils
- Cloud-Katana - cloud and hybrid cloud environments.
- cloudlist
- Cloud Sniper
- Cloudmapper
- Cloudmarker
- Cloudsploit
- CloudQuery - baked SQL [policies](https://hub.cloudquery.io/policies) for security and compliance.
- Cloud-custodian
- consoleme
- cs suite
- Deepfence ThreatMapper
- dftimewolf - cloud framework for orchestrating forensic collection, processing and data export.
- diffy
- ElectricEye
- Forseti security
- Hammer - account cloud security tool for AWS. It identifies misconfigurations and insecure data exposures within most popular AWS resources.
- kics - as-code.
- Matano
- Metabadger
- Open policy agent - based control tool.
- pacbot
- pacu
- Prowler
- ScoutSuite - cloud security auditing tool.
- Security Monkey
- SkyWrapper
- Smogcloud
- Steampipe
- Terrascan
- tfsec
- Zeus
- auditkube
- Falco
- mkit
- Open policy agent - based control tool.
- aws-allowlister
- binaryalert
- cloudsplaining - prioritized report.
- Cloud Guardrails - pick cloud security guardrails by generating Terraform files that create Azure Policy Initiatives.
- Function Shield
- FestIN
- GCPBucketBrute
- IAM Zero - privilege policies.
- Lambda Guard
- Policy Sentry
- S3 Inspector
- Serverless Goat
- SkyArk
- ccat
- CloudBrute
- cloudgoat
- Leonidas
- Pwned Labs
- Sadcloud
- TerraGoat
- WrongSecrets
- Artifact
- Audit manager
- Certificate Manager
- CloudTrail
- Config
- Elastic Disaster Recovery
- Detective
- Firewall Manager
- GuardDuty
- CloudHSM
- Inspector
- KMS
- Macie
- Network Firewall
- Secret Manager
- Security Hub - party security service.
- Shield
- Single Sign-On
- ThreatMapper
- VPC Flowlog
- WAF
- Application Gateway
- DDoS Protection
- Dedicated HSM
- Key Vault
- Monitor
- Security Center - party security service.
- Sentinel
- Access Transparency
- Apigee Sense
- Armor
- Asset Inventory
- Assured workloads
- Audit Logs
- Binanry Authorization
- Cloud HSM
- Cloud IDS
- Confidential VM
- Context-aware Access
- DLP
- EKM
- Identity-Aware Proxy - Aware Proxy for protect the internal service.
- KMS
- Policy Intelligence
- Security Command Center
- Security Scanner
- Shielded VM
- Event Threat Detection
- VPC Service Controls
- Overiew of AWS Security
- AWS-IAM-Privilege-Escalation by RhinoSecurityLabs
- MITRE ATT&CK Matrices of AWS
- AWS security workshops
- ThreatModel for Amazon S3 - based approach
- Bucket search by grayhatwarfare
- Overiew of Azure Security
- Azure security fundamentals
- MicroBurst by NetSPI
- MITRE ATT&CK Matrices of Azure
- Azure security center workflow automation
- Overiew of GCP Security
- GKE security scenarios demo
- MITRE ATT&CK Matrices of GCP
- Security response automation
- Cloud Security Research by RhinoSecurityLabs
- CSA cloud security guidance v4
- Appsecco provides training
- Cloud Risk Encyclopedia by Orca Security
- AWS Security
- DevSecOps – Kubernetes DevOps & Security
- DevSecOps: Insecure Docker Registry
- Learn Cloud Security, Kubernetes, DevSecOps, and more
- Certified Kubernetes Security Specialist (CKS)
- On-Demand: DevSecOps: Beginner Edition Bootcamp
- On-Demand: Cloud Security: AWS Edition Bootcamp
- On-Demand: Container Security: Beginner Edition Bootcamp
- Attacking and Defending AWS
- CCSP – Certified Cloud Security Professional
- AWS Certified Security - Specialty
- Microsoft Certified: Azure Security Engineer Associate
- Certified Kubernetes Security Specialist (CKS)
- Mapping of On-Premises Security Controls vs. Major Cloud Providers Services
Programming Languages
Keywords
aws
31
security
24
cloud
17
aws-security
15
cloud-security
15
azure
11
gcp
11
security-tools
11
kubernetes
9
devsecops
7
iam
6
terraform
5
compliance
5
lambda
4
devops
4
cloudsecurity
4
pentesting
4
cspm
4
azure-security
4
security-audit
4
aws-iam
4
cloud-native
4
gke
3
containers
3
serverless
3
penetration-testing
3
salesforce
3
google-cloud-platform
3
google
3
security-automation
2
cloud-compliance-reporting
2
cloud-auditing
2
hacking
2
infosec
2
dfir
2
s3-bucket
2
serverless-security
2
vulnerability-detection
2
vulnerability-scanners
2
eks
2
aws-lambda
2
aws-audit
2
cybersecurity
2
etl
2
attack-surface-management
2
cnapp
2
infrastructure-as-code
2
hardening
2
sql
2
cli
2