Aws Security Python Packages

checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

policy-sentry

IAM Least Privilege Policy Generator

cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

cfripper

Library and CLI tool for analysing CloudFormation templates and check them for security compliance.

airiam

Least privilege AWS IAM Terraformer

cloud-audit

Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.

s3-security-scanner

AWS S3 security scanner: detect public access, weak bucket policies, missing encryption and compliance gaps across your buckets. Python CLI with multi-format reports.

terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

awsmap

A fast, comprehensive tool for mapping and inventorying AWS resources across 150+ services and all regions.

ec2-security-scanner

AWS EC2 security scanner: 46 checks across 8 categories (IMDSv2, security groups, EBS encryption, public AMIs, IAM, patching), UserData secret detection, and compliance mapping for FSBP, CIS, PCI DSS, HIPAA, SOC 2, ISO 27001 and NIST.

lambda-security-scanner

A comprehensive AWS Lambda security scanner with multi-framework compliance mapping

cyntrisec

Historical AWS analysis CLI; not a current Cyntrisec product

bedrock-keys-security

Detect phantom IAM users, decode leaked AWS Bedrock and Claude Platform API keys, and prevent LLMjacking. CLI + SCPs + SIEM detection rules.

festin

FestIn - Open S3 Bucket Scanner

aws-iam-utils

Python library for examining, creating and optimising IAM policies

kinnaird-utils

No description available

awsxenos

AWSXenos will list all the trust relationships in all the IAM roles, S3 buckets, and more

aws-audit-checklist

Free, read-only AWS security audit CLI — the 30-point checklist a fractional CTO runs on client accounts.

ecs-eks-security-scanner

AWS ECS/EKS security scanner: 45 checks across 8 categories (privileged containers, secrets in task defs, public endpoints, control-plane logging, IAM), compliance mapping for 11 frameworks

rds-security-scanner

A comprehensive AWS RDS / Aurora security scanner with multi-framework compliance mapping

iam-security-scanner

Comprehensive AWS IAM security scanner with multi-framework compliance mapping

security-asset-correlator

Cross-tool canonical asset correlation engine for security operations

cloudsecure

CLI for the CloudSecure AWS Security Assessment Platform

aws-network-preflight

Declare allowed and denied AWS connectivity in YAML and verify it with AWS Reachability Analyzer.