awesome-cloud-security
A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
https://github.com/Funkmyster/awesome-cloud-security
Last synced: 13 days ago
JSON representation
Certifications
Vulnerable By Design
- AWS Certified Security Specialty
- Google Professional Cloud Security Engineer
- Oracle Cloud Platform Identity and Security Management
- CCSP - Certified Cloud Security Professional
- CCSK - Certificate of Cloud Security Knowledge
- CCAK - Certificate of Cloud Auditing Knowledge
- Google Professional Cloud Security Engineer
- CCAK - Certificate of Cloud Auditing Knowledge
- Azure Security Engineer Associate
Cloud Security Standards
MultiCloud Governance
Container Tools
MultiCloud Governance
Examples
Ex. Automated Security Assessment
- AWS Config Rules Repository
- AWS Inspector Agent Autodeploy
- AWS Inspector Auto Remediation
- AWS Inspector Lambda Finding Processor
Ex. Identity and Access Management
Ex. Logging
Ex. Web Application Firewall
Kubernetes Operators
MultiCloud Governance
Learning
Blogs
Courses
- Oracle Cloud Security Administrator
- AWS Security Path
- Azure Security Path
- GCP Security Path
- Oracle Cloud Security Administrator
Labs
- AWS Workshops
- AWS Identity: Using Amazon Cognito for serverless consumer apps
- AWS Network Firewall Workshop
- AWS Networking Workshop
- Access Delegation
- Amazon VPC Endpoint Workshop
- Build a Vulnerability Management Program Using AWS for AWS
- Data Discovery and Classification with Amazon Macie
- Data Protection
- DevSecOps - Integrating security into your pipeline
- Disaster Recovery on AWS
- Finding and addressing Network Misconfigurations on AWS
- Firewall Manager Service - WAF Policy
- Getting Hands on with Amazon GuardDuty
- Hands on Network Firewall Workshop
- Implementing DDoS Resiliency
- Infrastructure Identity on AWS
- Integrating security into your container pipeline
- Integration, Prioritization, and Response with AWS Security Hub
- Introduction to WAF
- Permission boundaries: how to delegate permissions on AWS
- Protecting workloads on AWS from the instance to the edge
- Scaling threat detection and response on AWS
- Serverless Identity
- PagerDuty Training Lab
- PagerDuty Training for Engineers
- PagerDuty Training for Everyone: Part 1
- PagerDuty Training for Everyone: Part 2
- Amazon VPC Endpoint Workshop
- Data Discovery and Classification with Amazon Macie
- PagerDuty Training GitHub
- AWS Network Firewall Workshop
- AWS Networking Workshop
- Firewall Manager Service - WAF Policy
- Hands on Network Firewall Workshop
- Implementing DDoS Resiliency
- Introduction to WAF
Podcasts
Vulnerable By Design
Misc
Ex. Web Application Firewall
Projects
Alerting
Automated Security Assessment
- Bucket Finder
- Boto3
- ScoutSuite
- weirdAAL
- Prowler
- CloudFox
- SkyArk
- Pacu
- Principal Mapper
- s3_objects_check
- cloudmapper
- NetSPI/AWS_Consoler
Benchmarking
Data Loss Prevention
Firewall Management
Identity and Access Management
- CloudSplaining
- AWS IAM Generator
- Parliament
- CloudTracker
- Aardvark
- ConsoleMe
- PolicyUniverse
- Repokid
- Knox
- AWS-AllowLister
- Terraform for Policy Guru
- aws-lint-iam-policies
- AWS Missing Tools by CloudAvail
- Enumerate IAM by Andres Riancho
- Kubernetes AWS IAM Authenticator by Kubernetes SIG
- Policy Sentry
Incident Response
- AWS Incident Response Playbooks by AWS Samples
- Dispatch by Netflix
- PagerDuty Automated Remediation Docs
- PagerDuty Business Response Docs
- PagerDuty DevSecOps Docs
- PagerDuty Full Case Ownership Docs
- PagerDuty Full Service Ownership Docs
- PagerDuty Going OnCall Docs
- PagerDuty Incident Response Docs
- PagerDuty Operational Review Docs
- PagerDuty PostMortem Docs
- PagerDuty Retrospectives Docs
- PagerDuty Stakeholder Communication Docs
- Velociraptor
Spring
Threat modeling
- ThreatModel for Amazon S3 - Library of all the attack scenarios on Amazon S3 and how to mitigate them, following a risk-based approach
Public Cloud Governance
AWS Governance
- AWS CloudFormation Guard
- AWS CodePipeline Governance
- AWS Config Rules Development Kit
- AWS Vault
- AWS Well Architected Labs