Resources

Guides and Tutorials

• DevOps exercises divided into different arguments

Tools

• AWS Deployment Framework - deployment-framework?label=%E2%AD%90%EF%B8%8F&logo=github" alt="Stars">](https://github.com/awslabs/aws-deployment-framework) | | governance, cloud-environment, cloud-provider-tool | An extensive and flexible framework by AWS to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. |
• Checkov - raw/bridgecrewio/checkov" alt="Issues">](https://github.com/bridgecrewio/checkov) | | Active monitoring | revent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew. |
• Cloud Custodian - custodian/cloud-custodian?label=%E2%AD%90%EF%B8%8F&logo=github" alt="Stars">](https://github.com/cloud-custodian/cloud-custodian) | | AWS, Azure, GCP, Security Assessment | Rules engine for cloud security, cost optimization, and governance. |
• Cloudsaga - cloudsaga?label=%E2%AD%90%EF%B8%8F&logo=github" alt="Stars">](https://github.com/awslabs/aws-cloudsaga) | | Security, Alerts, AWS, CIRT | AWS CloudSaga - Simulate security events in AWS. |
• Electric Eye - raw/jonrau1/ElectricEye" alt="Issues">](https://github.com/jonrau1/ElectricEye) | | Security Posture, Management | ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface |
• Git Remote CodeCommit - remote-codecommit?label=%E2%AD%90%EF%B8%8F&logo=github" alt="Stars">](https://github.com/aws/git-remote-codecommit) | | AWS, CodeCommit, AWS Credentials | An implementation of Git Remote Helper that makes it easier to interact with AWS CodeCommit. |
• Locust - raw/locustio/locust" alt="Issues">](https://github.com/locustio/locust) | | Write scalable load tests in plain Python 🚗💨 | Write scalable load tests in plain Python 🚗💨 |
• Mercury - raw/mljar/mercury" alt="Issues">](https://github.com/mljar/mercury) | - | Notebook, Jupiter, WebApp | Add interactive widgets in Python notebooks, so you can share notebooks as web applications. |
• Pacu - raw/RhinoSecurityLabs/pacu" alt="Issues">](https://github.com/RhinoSecurityLabs/pacu) | | open-source AWS exploitation framework | an open-source AWS exploitation framework, designed for offensive security testing against cloud environments. Created and maintained by Rhino Security Labs, Pacu allows penetration testers to exploit configuration flaws within an AWS account, using modules to easily expand its functionality. |
• PMapper - raw/nccgroup/PMapper" alt="Issues">](https://github.com/nccgroup/PMapper) | | A tool for quickly evaluating IAM permissions in AWS. | Principal Mapper (PMapper) is a script and library for identifying risks in the configuration of AWS Identity and Access Management (IAM) for an AWS account or an AWS organization |
• Policy Sentry - raw/salesforce/policy_sentry" alt="Issues">](https://github.com/salesforce/policy_sentry) | | Policy Generator | Policy Sentry allows users to create least-privilege IAM policies in a matter of seconds, rather than tediously writing IAM policies by hand. These policies are scoped down according to access levels and resources. In the case of a breach, this helps to limit the blast radius of compromised credentials by only giving IAM principals access to what they need. |
• PolicyUniverse - Skunkworks/policyuniverse?label=%E2%AD%90%EF%B8%8F&logo=github" alt="Stars">](https://github.com/Netflix-Skunkworks/policyuniverse) | | This package provides classes to parse AWS IAM and Resource Policies. | This package provides classes to parse AWS IAM and Resource Policies. |
• Prowler - cloud/prowler?label=%E2%AD%90%EF%B8%8F&logo=github" alt="Stars">](https://github.com/prowler-cloud/prowler) | | Security, Cyber-security | Prowler is an Open Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices |
• TrailBlazer - aws?label=%E2%AD%90%EF%B8%8F&logo=github" alt="Stars">](https://github.com/willbengtson/trailblazer-aws) | | CloudTrail, Monitoring, Attack Simulation, Security Posture, Less Privilege | A tool written to determine what AWS API calls are logged by CloudTrail and what they are logged as. |
• Access Undenied AWS - undenied-aws?label=%E2%AD%90%EF%B8%8F&logo=github" alt="Stars">](https://github.com/ermetic/access-undenied-aws) | | Cloudtrail, Security, Remediation | Parses AWS AccessDenied CloudTrail events, explains the reasons for them, and offers actionable remediation steps |