matthewdfuller / safer-scps
Safer AWS SCP deployments via real-time monitoring
☆32Updated last year
Related projects ⓘ
Alternatives and complementary repositories for safer-scps
- Scripts to quickly fix security and compliance issues☆25Updated 11 months ago
- AWS SSO Reporter☆54Updated last year
- Crowdsourced list of sensitive IAM Actions☆139Updated 2 weeks ago
- ☆22Updated last year
- To clean up your AWS AMIs: First, include AMIs by name or tag. Second, exclude AMIs in use, younger than N days, or the newest N images. …☆33Updated 3 months ago
- SCP management tool☆125Updated last year
- ☆21Updated last year
- Generates runbooks for GuardDuty findings☆34Updated 4 months ago
- ☆111Updated last week
- A cloud security tool to search and clean up unused AWS access keys, written in Go.☆49Updated 2 years ago
- Kickstart and manage your AWS Organization via Terraform☆71Updated 3 months ago
- Example policies demonstrating how to implement a data perimeter on AWS.☆118Updated 3 months ago
- PolicyGlass allows you to analyse one or more AWS policies' effective permissions in aggregate, by restating them in the form of PolicySh…☆58Updated 2 years ago
- ☆140Updated 4 months ago
- AWS honey token manager☆84Updated 3 months ago
- Expand IAM Actions with Wildcards☆26Updated 2 weeks ago
- Identify all permitted data paths originating from the Internet to Network Interfaces within AWS Accounts across the entire AWS Organizat…☆36Updated last year
- Tag instances & databases with cron-style stop/start schedules to cut AWS costs. Also schedule EBS, EC2 & RDS backups, plus CloudFormatio…☆35Updated 2 years ago
- A collection of documented and undocumented AWS API models☆27Updated 2 months ago
- CloudSplaining on AWS Managed Policies☆41Updated this week
- Publicly-listed AWS account IDs for easy lookup. Great for cleaning up false positives from unknown Account IDs in Cloudtrail☆35Updated 5 months ago
- Tracker for Encryption by Default for AWS Resources☆9Updated last month
- A Golang program to rotate AWS & GCP account keys☆65Updated 2 months ago
- ☆109Updated 3 weeks ago
- ☆37Updated 9 months ago
- This solutions facilitates rapid deployment of Prowler, full AWS Organization analysis, and finding processing as part of a security post…☆53Updated 2 months ago
- The Amazon Elastic Kubernetes Service (EKS) Creation Engine (ECE) is a Python command-line program created by the Lightspin Office of the…☆40Updated last year
- ☆32Updated last year
- This implementation demonstrates the AWS Identity and Access Management (IAM) Access Analyzer policy validation capability. Learn how to …☆23Updated 2 years ago
- Open-source proof-of-concept client for AWS IAM Roles Anywhere☆71Updated 2 years ago