SaaSHub helps you find the best software and product alternatives Learn more →
Consoleme Alternatives
Similar projects and alternatives to consoleme
-
terraform-cdk
Define infrastructure resources using programming constructs and provision them using HashiCorp Terraform
-
cerbos
Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
-
iamlive
Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy
-
aws-iam-generator
Generate Multi-Account IAM users/groups/roles/policies from a simple YAML configuration file and Jinja2 templates.
-
tfquery
tfquery: Run SQL queries on your Terraform infrastructure. Query resources and analyze its configuration using a SQL-powered framework.
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
-
ElectricEye
ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks
-
metabadger
Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).
-
example-permissions-boundary
This repository contains a sample IAM permissions boundary as a starting point for creating your own permissions boundary to meet the security needs of your organization. The IAM permissions boundary sample, when attached to an IAM role, allow it to perform all expected workload tasks without being able to modify the security of its environment.
-
slauth-cli
CLI that scans directories for Cloud Provider SDK usage generates the IAM Policies/Permissions needed
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
consoleme reviews and mentions
-
Launch HN: Slauth (YC S22) – auto-generate secure IAM policies for AWS and GCP
Why are you using (very expensive) GPT, or any LLM for that matter, when this was already a solved problem using rulesets? Netflix for example has open source that does this already: https://github.com/Netflix/consoleme
Instead of analyzing your code, you just run your code with no permissions and it automatically detects permission failures and thens open those permissions, with a UI showing you what it did so you can remove any permissions you don't want.
That actually seems much more secure than trying to divine the rules from reading the code.
What value is the LLM adding here?
-
AWS SSO: Strategy for access to all member accounts
You may also want to look into Netflix’s ConsoleMe https://github.com/Netflix/consoleme
-
AWS IAM Roles, a tale of unnecessary complexity
This is the way. I’ve seen this happen countless times. It’s happened to me too. It’s happened to colleagues.
The worst case I’m aware of from first-hand knowledge was a large cluster of resources that got deployed for a product demo by a sales engineer and forgotten about. Turned into a nice ~$100,000 surprise in the quarterly budget.
Netflix built a tool for managing IAM permission requests as an auditable workflow, called ConsoleMe: https://github.com/Netflix/consoleme
-
How do you handle IAM requests?
There’s this tool as well https://github.com/Netflix/consoleme among others, check them out and see if the overhead is ok for you all now, but keep it simple to start.
-
Permissions manager
Perhaps Consoleme from Netflix is a useful tool for you?
- Netflix/Consoleme: A Central Control Plane for AWS Permissions and Access
-
Anyone willing to be an AWS mentor?
For sure, you can DM me. Might want to check out https://github.com/Netflix/consoleme too
- Netflix Open Sources ConsoleMe to Manage Permissions and Access on AWS
-
I built a tool which automatically suggests least-privilege IAM policies
The tool is in a similar space to iamlive, policy_sentry, and consoleme (all of which are worth checking out too if you're interested in making AWS security easier) but the main points of difference I see are:
-
Zero knowledge of multiple accounts/cross accounts rolea/budgets/consolidated bill etc. Any good resources to read ?
After you read the resources, you can stand on the "shoulders of giants" https://github.com/Netflix/consoleme
-
A note from our sponsor - SaaSHub
www.saashub.com | 25 Apr 2024
Stats
Netflix/consoleme is an open source project licensed under Apache License 2.0 which is an OSI approved license.
The primary programming language of consoleme is Python.
Sponsored