aws-security · GitHub Topics

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

翻译 - Bridgecrew使用Checkov防止在Terraform，Cloudformation，Kubernetes，无服务器框架和其他基础架构代码语言的构建期间对云进行错误配置。

Terraform static-analysis Amazon Web Services Google 云 Azure aws-security cloudformation scans compliance Kubernetes Infrastructure as code DevOps Hacktoberfest

Python 7.41 k

12 小时前

tenable / terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

翻译 - 在配置云原生基础架构之前，将整个基础架构中的合规性和安全违规行为作为代码进行检测，以降低风险。

安全 Infrastructure as code devsecops DevOps Terraform Amazon Web Services cloudsecurity cloud-security terrascan infrastructure architecture Kubernetes sast azure-security aws-security gcp-security scans

Go 4.86 k

3 个月前

RhinoSecurityLabs / pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

翻译 - AWS 开发框架，旨在测试 Amazon Web Services 环境的安全性。

aws-security penetration-testing Amazon Web Services 安全 Python

Python 4.57 k

7 天前

jassics / security-study-plan

网络安全工程师学习计划

aws-security study-guide study-plan appsec appsec-tutorials azure-security devsecops-university gcp-security pentesting application-security Cybersecurity security-testing api-security

4.54 k

1 个月前

Netflix / security_monkey

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

翻译 - Security Monkey监视AWS，GCP，OpenStack和GitHub组织的资产及其随时间的变化。

Amazon Web Services Python aws-s3 aws-ec2 aws-sqs aws-vpc aws-iam boto3 boto botocore aws-security 安全

Python 4.36 k

4 年前

4ndersonLin / awesome-cloud-security

🛡️ Awesome Cloud Security Resources ⚔️

安全 cloud-computing cloud-security Cybersecurity Amazon Web Services aws-security Azure azure-security Google 云 gcp-security

2.15 k

4 个月前

salesforce / policy_sentry

IAM Least Privilege Policy Generator

翻译 - IAM最低特权策略生成器

Amazon Web Services iam cloud 安全 cloudsecurity iam-policy aws-security salesforce Hacktoberfest

Python 2.06 k

11 天前

salesforce / cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

翻译 - Cloudsplaining是一种AWS IAM安全评估工具，可识别违反最小特权的行为并生成风险优先报告。

Amazon Web Services aws-iam cloud 安全 salesforce aws-security cloud-security iam Hacktoberfest

JavaScript 2.05 k

11 天前

DataDog / stratus-red-team

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

翻译 - ☁️ :zap：云的粒度、可操作的对手仿真。

Amazon Web Services adversary-emulation purple-team mitre-attack cloud-security cloud-native-security detection-engineering threat-detection 安全 aws-security azure-security kubernetes-security gcp-security

Go 1.94 k

9 天前

matanolabs / matano

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

Amazon Web Services cloud 安全 big-data Serverless apache-iceberg log-analytics log-management threat-hunting Rust alerting cloud-native aws-security cloud-security Cybersecurity secops dfir detection-engineering siem

Rust 1.52 k

2 个月前

jassics / awesome-aws-security

#Awesome#Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security

cloud-security aws-security Awesome Lists Amazon Web Services 安全 aws-auditing aws-security-automation

1.33 k

1 个月前

tmobile / pacbot

PacBot (Policy as Code Bot)

cloud-security 安全 Amazon Web Services policy-as-code cloud security-automation aws-security Java Angular cloud-native Spring Boot

Java 1.3 k

2 年前

bridgecrewio / terragoat

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production...

翻译 - TerraGoat是Bridgecrew的“设计易受攻击” Terraform存储库。 TerraGoat是一个学习和培训项目，它演示了常见的配置错误如何将其发现到生产云环境中。

Terraform aws-security cloud-security goat azure-security gcp-security devsecops

HCL 1.18 k

6 个月前

SecurityFTW / cs-suite

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

aws-security 安全 cloud-security Google 云 azure-security Azure

Shell 1.15 k

2 年前

aws-samples / aws-security-reference-architecture-examples

Example solutions demonstrating how to implement patterns within the AWS Security Reference Architecture guide using CloudFormation (including Customizations for AWS Control Tower) and Terraform.

Amazon Web Services aws-cloudformation aws-control-tower aws-security aws-security-automation

Python 1.01 k

1 个月前

jonrau1 / ElectricEye

ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & ...

安全 cloud-security security-monitoring aws-security security-hub security-engineering devsecops compliance attack-surface-management Amazon Web Services gcp-security multicloud asset-management

Python 983

25 天前