Top 11 Python aws-security Projects

checkov

54 6,512 9.9 Python

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Project mention: A Deep Dive Into Terraform Static Code Analysis Tools: Features and Comparisons | dev.to | 2024-04-16

Checkov Owner/Maintainer: Prisma Cloud by Palo Alto Networks (acquired in 2021) Age: First released on GitHub on March 31st, 2021 License: Apache License 2.0

pacu

10 4,014 8.8 Python

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Project mention: De um mimo até a elevação de privilégios na Cloud | dev.to | 2023-07-27

Pra isso, usei a belíssima ferramenta Pacu https://github.com/RhinoSecurityLabs/pacu.

InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
policy_sentry

5 1,938 8.1 Python

IAM Least Privilege Policy Generator
aws-security-reference-architecture-examples

3 918 9.0 Python

Example solutions demonstrating how to implement patterns within the AWS Security Reference Architecture guide using CloudFormation (including Customizations for AWS Control Tower) and Terraform.
awspx

1 865 10.0 Python

A graph-based tool for visualizing effective access and resource relationships in AWS environments.

Project mention: Open-source IAM Access Visualizer | /r/devops | 2023-05-19

Looks similar to awspx. Always good to have more visualisation tools

ElectricEye

1 860 9.5 Python

ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks
AirIAM

3 750 0.0 Python

Least privilege AWS IAM Terraformer

Project mention: AWS Networking Concepts in a Diagram | news.ycombinator.com | 2023-07-22

ugh access + least privilege on AWS + GCP is really hard
not made easier by the fact that debugging service accounts can sometimes require rebooting boxes or clusters
'cloud traceroute' to discover where exactly the problem is would be amazing
(in fairness there are 'least privilege' tools I haven't tried -- listed below and I recall reading about others)
1. iam access analyzer https://aws.amazon.com/blogs/security/iam-access-analyzer-ma...
2. airiam https://github.com/bridgecrewio/AirIAM
3. policy simulator https://cloud.google.com/policy-intelligence/docs/iam-simula...

WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
introspector

1 66 0.0 Python

A schema and set of tools for using SQL to query cloud infrastructure.
AWSXenos

5 58 0.0 Python

AWSXenos will list all the trust relationships in all the IAM roles and S3 buckets
aws-iam-utils

1 16 0.0 Python

Python library for examining, creating and optimising IAM policies
auto-close-aws-accounts

2 14 4.5 Python

Automatically close AWS Accounts when moved to a specific Organizational Unit, such as SuspendedOU or ToBeDeletedOU or BlackHole 😛

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

Python aws-security related posts

De um mimo até a elevação de privilégios na Cloud
1 project | dev.to | 27 Jul 2023
Newsletter martinmueller.dev 2022 week 21
1 project | dev.to | 29 May 2022
AWS Security Reference Architecture (AWS SRA) code examples v2.0.0 release
1 project | /r/aws | 14 Mar 2022
How do I build a network on AWS to capture flow data?
1 project | /r/aws | 16 Nov 2021
Testing Terraform The Right Way
4 projects | dev.to | 25 Oct 2021
Pacu: The Open Source AWS Exploitation Framework
1 project | /r/devopskhan | 21 Oct 2021
Pacu: The Open Source AWS Exploitation Framework
1 project | /r/aws | 7 Oct 2021
A note from our sponsor - WorkOS
workos.com | 23 Apr 2024

The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →

Index

What are some of the best open-source aws-security projects in Python? This list will help you:

	Project	Stars
1	checkov	6,512
2	pacu	4,014
3	policy_sentry	1,938
4	aws-security-reference-architecture-examples	918
5	awspx	865
6	ElectricEye	860
7	AirIAM	750
8	introspector	66
9	AWSXenos	58
10	aws-iam-utils	16
11	auto-close-aws-accounts	14