Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
翻译 - 在配置云原生基础架构之前,将整个基础架构中的合规性和安全违规行为作为代码进行检测,以降低风险。
🛡️ Awesome Cloud Security Resources ⚔️
☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud
翻译 - ☁️ :zap:云的粒度、可操作的对手仿真。
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production...
翻译 - TerraGoat是Bridgecrew的“设计易受攻击” Terraform存储库。 TerraGoat是一个学习和培训项目,它演示了常见的配置错误如何将其发现到生产云环境中。
Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!
翻译 - 我们非常受欢迎的AWS和Azure上的Breaking and Pwning应用程序和服务器的课程内容,实验室设置说明和文档,动手培训!
TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.
TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.
cloudgrep is grep for cloud storage
Microsoft Azure Guide. Learn all about Microsoft Azure Tools, Services, and Certifications.
Rapidly apply hundreds of security controls in Azure
Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Cloud.
Study Guide for the Microsoft Azure Security Technologies Exam
Everything about Microsoft Cloud Security!
Offensive Terraform Website
Offensive Terraform Website
Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a list of the 2022 Top 7 Cloud Attack Paths across AWS, Azure, GC...
Azure PCI PaaS Reference Architecture