awesome-cloud-security
🛡️ Awesome Cloud Security Resources ⚔️
https://github.com/4ndersonLin/awesome-cloud-security
Last synced: 30 days ago
JSON representation
AWS
Azure
Benchmarks
Compliances
Container
- Open policy agent - based control tool.
- Falco
- mkit
- auditkube
GCP
Infrastructure
- aws_pwn
- aws_ir
- aws-firewall-factory
- aws-vault
- azucar
- checkov - as-code.
- cloud-forensics-utils
- Cloud-Katana - cloud and hybrid cloud environments.
- cloudlist
- Cloud Sniper
- Cloudmapper
- Cloudmarker
- Cloudsploit
- CloudQuery - baked SQL policies for security and compliance.
- Cloud-custodian
- consoleme
- cs suite
- dftimewolf - cloud framework for orchestrating forensic collection, processing and data export.
- diffy
- ElectricEye
- Forseti security
- Hammer - account cloud security tool for AWS. It identifies misconfigurations and insecure data exposures within most popular AWS resources.
- kics - as-code.
- Matano
- Metabadger
- pacbot
- pacu
- ScoutSuite - cloud security auditing tool.
- Security Monkey
- SkyWrapper
- Smogcloud
- Steampipe
- Zeus
- PMapper
- awspx - based tool for visualizing effective access and resource relationships within AWS.
- Prowler
- tfsec
- Terrascan
- InfraScan
Native tools
- Artifact
- Audit manager
- Certificate Manager
- CloudTrail
- Config
- Elastic Disaster Recovery
- Detective
- Firewall Manager
- GuardDuty
- CloudHSM
- Inspector
- KMS
- Macie
- Network Firewall
- Secret Manager
- Security Hub - party security service.
- Shield
- Single Sign-On
- VPC Flowlog
- WAF
- Application Gateway
- DDoS Protection
- Dedicated HSM
- Key Vault
- Monitor
- Security Center - party security service.
- Sentinel
- Access Transparency
- Armor
- Assured workloads
- Audit Logs
- Cloud HSM
- Cloud IDS
- Confidential VM
- Context-aware Access
- DLP
- Identity-Aware Proxy - Aware Proxy for protect the internal service.
- Policy Intelligence
- Security Command Center
- Shielded VM
- Event Threat Detection
- VPC Service Controls
- Context-aware Access
- ThreatMapper
- Sentinel
- Key Vault
- DDoS Protection
- Audit Logs
- Monitor
- Security Center - party security service.
- Sentinel
- Binanry Authorization
- Policy Intelligence
- Event Threat Detection
- Asset Inventory
- Confidential VM
Others
- CSA cloud security guidance v4
- Mapping of On-Premises Security Controls vs. Major Cloud Providers Services
- AWS Security
- DevSecOps: Insecure Docker Registry
- On-Demand: DevSecOps: Beginner Edition Bootcamp
- On-Demand: Cloud Security: AWS Edition Bootcamp
- On-Demand: Container Security: Beginner Edition Bootcamp
- Attacking and Defending AWS
- CCSP – Certified Cloud Security Professional
- DevSecOps – Kubernetes DevOps & Security
- Certified Kubernetes Security Specialist (CKS)
- Cloud Security Research by RhinoSecurityLabs
- Appsecco provides training
- AWS Security
- CSA cloud security guidance v4
- Microsoft Certified: Azure Security Engineer Associate
Penetration testing/learning
SaaS
- S3 Inspector
- aws-allowlister
- binaryalert
- cloudsplaining - prioritized report.
- Cloud Guardrails - pick cloud security guardrails by generating Terraform files that create Azure Policy Initiatives.
- Function Shield
- FestIN
- GCPBucketBrute
- IAM Zero - privilege policies.
- Lambda Guard
- Policy Sentry
- Serverless Goat
- SkyArk