PyPI · RubyGems
bridgecrewio/checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
All tags
Catalogue tag
#aws-security
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
12 records
PyPI · npm
salesforce/cloudsplaining
Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
salesforce/policy_sentry
IAM Least Privilege Policy Generator
MITSep 17, 2026 · metrics 2.10.0
Go
DataDog/stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
cynative/cynative
Open-source framework for security agents with live, read-only access to your infrastructure. Audit AWS, GCP, Azure, Kubernetes, GitHub and GitLab as one system for privilege escalation, public exposure, leaked credentials and more, with agents you write in one markdown file.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
PyPI
aws-samples/aws-security-reference-architecture-examples
Example solutions demonstrating how to implement patterns within the AWS Security Reference Architecture guide using CloudFormation (including Customizations for AWS Control Tower) and Terraform.
Custom licenseSep 16, 2026 · metrics 2.10.0
PyPI
BeyondTrust/bedrock-keys-security
Detect phantom IAM users, decode leaked AWS Bedrock and Claude Platform API keys, and prevent LLMjacking. CLI + SCPs + SIEM detection rules.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
mhweiner/brek
Brek is a structured, typed config loader for Node.js — ideal for dynamic environments and securely managing secrets like those in AWS Secrets Manager.
MITSep 11, 2026 · metrics 2.10.0
RubyGems
OWASP/www-project-eks-goat
OWASP EKS Goat is a deliberately vulnerable EKS cluster environment to explore AWS cloud-native security through hands-on attack and defense labs with walkthrough.
GPL-3.0Sep 16, 2026 · metrics 2.10.0
Go · npm · PyPI
riskprofiler/CloudFrontier
Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Cloud.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
—
RepliMap/replimap-community
AWS Infrastructure Intelligence Engine — scan brownfield AWS accounts, map every dependency, and turn ClickOps into import-ready Terraform. 100% local.
Custom licenseSep 27, 2026 · metrics 2.10.0
npm
ReversecLabs/awspx
A graph-based tool for visualizing effective access and resource relationships in AWS environments.
GPL-3.0Sep 16, 2026 · metrics 2.10.0