Alternatives and similar repositories for secure-serverless-reference-architecture

Users that are interested in secure-serverless-reference-architecture are comparing it to the libraries listed below

• aws-samples / aws-cognito-okta-federation
  ☆22Updated last year
• SummitRoute / isolated_network_experiment
  CDK app to setup an isolated AWS network to experiment with ways of exfiltrating data
  ☆18Updated 3 years ago
• avishayil / cdk-goat
  Vulnerable by Design AWS Cloud Development Kit (CDK) Infrastructure
  ☆47Updated last year
• Frichetten / aws_api_shapeshifter
  A small library to alter AWS API requests; Used for fuzzing research
  ☆22Updated last year
• lightspin-tech / red-shadow
  Lightspin AWS IAM Vulnerability Scanner
  ☆96Updated 4 years ago
• hotnops / AWSRoleJuggler
  A toolset to juggle AWS roles for persistent access
  ☆57Updated 11 months ago
• offensive-terraform / offensive-terraform.github.io
  Offensive Terraform Website
  ☆45Updated 4 years ago
• benbridts / aws-undocumented-api-models
  Model files for undocumented AWS APIs
  ☆13Updated last year
• disruptops / assess_network
  Assess certain AWS network configurations
  ☆12Updated 6 years ago
• ncc-erik-steringer / Aerides
  An implementation of infrastructure-as-code scanning using dynamic tooling.
  ☆56Updated 3 years ago
• GoogleCloudPlatform / assured-workloads-terraform
  ☆16Updated 11 months ago
• tradichel / SecurityMetricsAutomation
  ☆41Updated last year
• ramimac / breach-list-database
  A meta-database collecting resources that compile lists of breaches
  ☆21Updated 8 months ago
• clearvector / lambda-spy
  ☆33Updated 2 years ago
• lightspin-tech / red-detector
  Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/)
  ☆89Updated 2 years ago
• ghostsecurityarchive / waf-btk
  WAF bypass PoC
  ☆48Updated last year
• snyk-labs / docker-goof
  A demo repo showcasing Snyk's Docker offering
  ☆32Updated 11 months ago
• latacora / remediate-AWS-IMDSv1
  Simple tool to identify and remediate the use of the AWS EC2 IMDSv1.
  ☆16Updated 3 years ago
• vectra-ai-research / log4j-aws-sandbox
  A set of AWS resources for testing the Log4Shell vulnerability, deployable with terraform
  ☆12Updated 3 years ago
• sebastian-mora / AWS-Loot
  Pull secrets from an AWS environment
  ☆70Updated 5 years ago
• jchrisfarris / detect-credential-compromise
  Cloudformation Template and Lambda to detect if Instance Profile credentials are being used outside your AWS Account.
  ☆29Updated 5 years ago
• SummitRoute / aws_research
  Public tables and other research that can accept PRs. Please visit the web link.
  ☆44Updated 5 years ago
• Permiso-io-tools / SkyScalpel
  ☆46Updated 8 months ago
• tenchi-security / camp
  CloudSplaining on AWS Managed Policies
  ☆44Updated this week
• aws-samples / aws-iam-identity-center-permission-policies-analyzer
  ☆17Updated 4 months ago
• goldfiglabs / sgCheckup
  sgCheckup generates nmap output based on scanning your AWS Security Groups for unexpected open ports.
  ☆81Updated 3 years ago
• gojek / CureIAM
  Clean accounts over permissions in GCP infra at scale
  ☆71Updated 2 years ago
• kaakaww / javaspringvulny
  javaspringvulny - a Spring Boot web application built wrong on purpose
  ☆20Updated 2 months ago
• salesforce / metabadger
  Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).
  ☆143Updated 2 months ago
• PaloAltoNetworks / IAM-Deescalate
  IAM-Deescalate helps mitigate privilege escalation risk in AWS identity and access management (IAM)
  ☆98Updated 2 years ago