Collection of example Service Control Policies (SCPs) that are useful for sandbox and training AWS accounts.
☆161Dec 22, 2025Updated 2 months ago
Alternatives and similar repositories for aws-scps-for-sandbox-and-training-accounts
Users that are interested in aws-scps-for-sandbox-and-training-accounts are comparing it to the libraries listed below
Sorting:
- SCP management tool☆135Oct 23, 2023Updated 2 years ago
- Example policies demonstrating how to implement a data perimeter on AWS.☆193Mar 3, 2026Updated last week
- Kickstart and manage your AWS Organization via Terraform☆123Feb 16, 2026Updated 3 weeks ago
- AWS Trustline: Check external access on your AWS account☆129Feb 27, 2026Updated last week
- Safer AWS SCP deployments via real-time monitoring☆56Sep 30, 2023Updated 2 years ago
- Bare minimum AWS Security Alerting and Secure by default Configuration☆513May 15, 2025Updated 9 months ago
- Example AWS Service control policies to get started or mature your usage of AWS SCPs.☆287Updated this week
- Collection of semi-useful Service Control Policies and scripts to manage them☆102Feb 1, 2025Updated last year
- Crowdsourced list of sensitive IAM Actions☆159Oct 29, 2024Updated last year
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆41Dec 12, 2023Updated 2 years ago
- ☆229Feb 24, 2026Updated 2 weeks ago
- TrailAlerts is a AWS-native, serverless cloud-detection tool that lets you define simple rules as code and get rich alerts about events i…☆51Nov 9, 2025Updated 4 months ago
- Scripts and IaC to create a ransomware resilient AWS Backup System☆16Sep 5, 2023Updated 2 years ago
- Sniff and attack networks that use IP-in-IP or VXLAN encapsulation protocols.☆23Aug 30, 2024Updated last year
- Analyzes CloudTrail data of a given AWS account and generates a summary of recently active IAM principals, API calls they made, as well a…☆165Dec 21, 2025Updated 2 months ago
- Runs IAM policy linting and security checks against either a single AWS account or multiple member accounts of an AWS Organization.☆152Dec 21, 2025Updated 2 months ago
- Configure a new AWS Account with security best practices☆21Apr 13, 2024Updated last year
- Uses the AWS Cloud Control API to list resources that are present in a given AWS account and region(s). Discovered resources are written …☆182Dec 21, 2025Updated 2 months ago
- CloudFormation template to create reasonable account defaults around Cost Surprise Alerting☆172Dec 11, 2024Updated last year
- A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation☆109Feb 16, 2024Updated 2 years ago
- Host Internal Static Website on AWS☆17Dec 6, 2023Updated 2 years ago
- A Terraform module that makes it a snap to opt out of all AWS AI/ML data harvesting.☆30Jan 2, 2024Updated 2 years ago
- Listing of resources for example AWS Service Control Policies (SCPs)☆17Jan 10, 2024Updated 2 years ago
- An SMTP server sidecar to allow AWS SES usage with IAM roles☆15Feb 7, 2023Updated 3 years ago
- Scripts to quickly fix security and compliance issues☆28Feb 9, 2026Updated last month
- Access Undenied parses AWS AccessDenied CloudTrail events, explains the reasons for them, and offers actionable remediation steps. Open-s…☆267Jan 26, 2023Updated 3 years ago
- Deploy SCPs, RCPs, and other AWS organization policies with Terraform☆104Jan 12, 2026Updated last month
- A command line tool that validates AWS IAM Policies in a Terraform template against AWS IAM best practices☆344Jun 9, 2025Updated 9 months ago
- ☆46Nov 7, 2024Updated last year
- A Golang program to rotate AWS & GCP account keys☆67May 12, 2025Updated 9 months ago
- ☆21Apr 17, 2023Updated 2 years ago
- ☆15Mar 31, 2023Updated 2 years ago
- Generates runbooks for GuardDuty findings☆38Jun 24, 2024Updated last year
- ☆122Aug 29, 2024Updated last year
- To clean up your AWS AMIs: First, include AMIs by name or tag. Second, exclude AMIs in use, younger than N days, or the newest N images. …☆36Feb 24, 2026Updated 2 weeks ago
- A PoC to Simulate Ransomware Attack on AWS Environment☆33Oct 14, 2024Updated last year
- Common Golang Packages for use by the Various Cloud Nuke Tools☆55Updated this week
- Vulnerable by Design AWS Cloud Development Kit (CDK) Infrastructure☆49Dec 29, 2023Updated 2 years ago
- rdsconn makes connecting to an AWS RDS instance inside a VPC from your laptop easier☆108Jul 13, 2023Updated 2 years ago