Aws Iam Python Packages

cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

awacs

Python library for AWS Access Policy Language creation

renovosolutions-aws-cdk-aws-sso

L2 constructs for AWS SSO

cfn-policy-validator

Parses IAM identity-based and resource-based policies from a CloudFormation template and runs them through IAM Access Analyzer checks.

airiam

Least privilege AWS IAM Terraformer

secret-keeper

Manage your application secrets safe & easy

consoleme

A Central Control Plane for AWS Permissions and Access

iam-docker-run

Run Docker containers within the context of an AWS IAM Role, and other development workflow helpers.

iam-sarif-report

Validate your IAM Policies and SCPs with AWS Policy Validator, and convert those results into SARIF documents for reporting.

arnmatch

Most complete AWS ARN parser. Automatically generated from AWS docs to map 2,100+ resources to CloudFormation, Tagging API, and boto3.

s3vaultlib

Library that implement a vault using S3, SSE, KMS, IAM

stsauth

A CLI tool that allows easy generation of AWS credentials using STS, ADFS, and Active Directory.

awsxenos

AWSXenos will list all the trust relationships in all the IAM roles, S3 buckets, and more

bedrock-keys-security

Detect phantom IAM users, decode leaked AWS Bedrock and Claude Platform API keys, and prevent LLMjacking. CLI + SCPs + SIEM detection rules.

subcheck

Decode and validate GitHub Actions OIDC token claims against an expected-claims policy - a CI gate against trust-policy drift

aws-session-credentials

A method for mfa-authenticated API access to AWS resources

asai

ASAI can find the available actions, conditions, and other useful IAM information for AWS services.

iamarmor

IAM Policy Analyzer & Fixer

security-monkey

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

fusillade

Federated User Identity Login & Access Decision Engine