#iam

ForgeMT is a multi-tenant platform for self-hosted GitHub Actions runners on AWS. It gives platform teams an IaC-driven way to operate ephemeral EC2 runners and ARC/Kubernetes runner scale sets for many tenant repositories.

Confluent's Apache Kafka .NET client

A drop-in replacement for boto3.Session named RefreshableSession. It automatically refreshes temporary AWS credentials, caches clients, and natively supports MFA providers. It also supports automatic temporary AWS security credential refresh for STS, IOT Core, and custom credential callables.

AWS IAM policy statement generator with fluent interface

Self-hosted authentication & authorization system (IAM: OAuth2 & OpenID Connect provider with realms, RBAC & ABAC policies, MFA (TOTP, passkeys, email OTP), identity federation (OIDC, LDAP) and session management.

The IAM layer for AI agents: cryptographic identity, capability authorization, and audit trails for non-human identities. Open source.

Terraform module to create AWS IAM resources 🇺🇦

⚡ Stop IAM misconfigurations before they become breaches — Catch overprivileged permissions, dangerous wildcards, and policy errors before deployment.

Machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Find risky trust paths, repository exposure, and authorization gaps before they become incidents.

Create bulk action scripts, automate your tasks, manage your projects, and seamlessly interact with the Ory Network using the Ory command line interface (CLI).

Tigris is a globally distributed S3-compatible object storage service that provides low latency anywhere in the world, enabling developers to store and access any amount of data for a wide range of use cases.

Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

Spinifex – Open source AWS-compatible platform for secure edge deployments. Run EC2, VPC, S3, and EBS-like services on bare metal with full control. Built for environments where running in the cloud isn’t an option. Whether you’re deploying to edge sites, private data-centers, or operating in low-connectivity or highly contested environments.

Collect IAM information from all your AWS organization, accounts, and resources.

A Testcontainer implementation for Keycloak IAM & SSO.

Juggernaut is a one-command setup tool that configures Claude Code to use AWS Bedrock, with cross-platform support (bash/zsh/fish/PowerShell), dry-run mode, and validation scripts.

An IAM Simulator that outputs detailed explains of how a request was evaluated.

Official Zitadel auth integration for React.