Alternatives and similar repositories for enterprise-reference-stack-for-aws

Users that are interested in enterprise-reference-stack-for-aws are comparing it to the libraries listed below

• offensive-terraform / offensive-terraform.github.io
  Offensive Terraform Website
  ☆45Updated 5 years ago
• gojek / CureIAM
  Clean accounts over permissions in GCP infra at scale
  ☆71Updated 2 years ago
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated 2 years ago
• avishayil / cdk-goat
  Vulnerable by Design AWS Cloud Development Kit (CDK) Infrastructure
  ☆48Updated 2 years ago
• ncc-erik-steringer / Aerides
  An implementation of infrastructure-as-code scanning using dynamic tooling.
  ☆56Updated 3 years ago
• GoogleCloudPlatform / assured-workloads-terraform
  ☆18Updated last year
• awslabs / Chatbot-to-help-security-teams-perform-vulnerability-assessments
  ☆29Updated this week
• offensive-actions / terraform-provider-statefile-rce
  This terraform provider can be used to get remote code execution by injecting a dummy resource in a writeable state file.
  ☆59Updated 11 months ago
• semgr8ns / semgr8s
  Semgrep-based Policy Controller for Kubernetes
  ☆47Updated 8 months ago
• tenable / hidden-services-revealer
  ☆39Updated last year
• kapilduraphe / mcp-watch
  A comprehensive security scanner for Model Context Protocol (MCP) servers that detects vulnerabilities and security issues in your MCP se…
  ☆113Updated 2 weeks ago
• lirlia / prel
  prel(iminary) is an application that temporarily assigns Google Cloud IAM Roles and includes an approval process.
  ☆45Updated this week
• hashicorp-forge / semgrep-rules
  HashiCorp-relevant rules for the Semgrep code analysis tool
  ☆41Updated 2 years ago
• latiotech / github-actions-log-checker
  Used to check Github actions logs for secrets - specifically tj-actions and reviewdog
  ☆22Updated 9 months ago
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆95Updated 5 months ago
• lightspin-tech / red-bucket-gcp
  ☆10Updated 3 years ago
• aws-samples / aws-cognito-okta-federation
  ☆24Updated last year
• primeharbor / breaches.cloud
  https://breaches.cloud
  ☆42Updated last year
• Permiso-io-tools / LogLicker
  Tool for obfuscating and deobfuscating data.
  ☆75Updated last year
• SecurityRunners / awsdocs
  Repository to archive AWS Documentation for local use
  ☆50Updated last year
• orcasecurity-research / kte
  Test & Compare different Kubernetes security offerings on EKS, GKE and AKS
  ☆40Updated last year
• StevenSmiley / aws-mine
  AWS honey token manager
  ☆89Updated last year
• latacora / remediate-AWS-IMDSv1
  Simple tool to identify and remediate the use of the AWS EC2 IMDSv1.
  ☆15Updated 4 years ago
• saw-your-packet / CloudShovel
  A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…
  ☆113Updated last year
• TinderSec / oidc-scanner-aws
  ☆49Updated 2 years ago
• anirudhbiyani / findmytakeover
  find dangling domains in a multi cloud environment
  ☆174Updated last week
• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆114Updated this week
• kaakaww / hawkscan-examples
  📖 A repo of configuration examples for StackHawk's Hawkscan!
  ☆17Updated 2 months ago
• DataDog / undocumented-aws-api-hunter
  A tool to uncover undocumented APIs from the AWS Console.
  ☆115Updated 8 months ago
• cloud-copilot / iam-collect
  Collect IAM information from all your AWS organization, accounts, and resources.
  ☆84Updated this week