Cloud Security Python Packages

cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

agent-bom

Open security scanner for AI supply chain and infrastructure: agents, MCP, containers, cloud, GPU, and runtime with blast-radius analysis.

cleancloud

Read-only cloud hygiene for AWS, Azure, and GCP. Multi-account org scanning, CI/CD enforcement, and deterministic cost modeling. No agents, no telemetry.

cloud-audit

Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.

consoleme

A central control plane for AWS permissions and access

kosty

Scan 30+ AWS services. Find cost waste. Detect security gaps. Map your attack surface. One command.

terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

iamarmor

IAM Policy Analyzer & Fixer

bedrock-keys-security

Detect phantom IAM users, decode leaked AWS Bedrock API keys, and prevent LLMjacking. CLI + SCPs + SIEM detection rules.

aws-allowlister

Automatically compile an AWS Service Control Policy that ONLY allows AWS services that are compliant with your preferred compliance frameworks.

az-rbac-watch

Azure RBAC as Code — drift detection and guardrails

awsxenos

AWSXenos will list all the trust relationships in all the IAM roles, S3 buckets, and more

awsssoreporting

Reports on Users/Group, Permission Sets, and Account Assignments

ciph

Fast, streaming file encryption for large media files and cloud uploads using modern cryptography.

threatmap

Static IaC threat modeler using STRIDE, MITRE, and PASTA

metabadger

Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).

pasu

Cloud IAM security guard - analyze AWS IAM policies for risks

secure-ec2

CLI tool that helps you to provision EC2 instances securely

cloudsecure

AWS security assessment platform with AI-powered analysis

cloudvault4

AWS S3 bucket scanner | Find exposed S3 buckets, Azure Blob & Google Cloud Storage | Cloud security scanner tool | Bucket enumeration & vulnerability detection

graphids

Graph-based cloud intrusion detection using GCN, Transformer autoencoder, and contrastive learning — Scientific Reports 2025

cloudmarker

Cloudmarker - Cloud security monitoring framework.

scope-forensics

Scope is an Open Source Cloud Forensics tool for AWS. Scope can rapidly obtain logs, discover resources, and create super timelines for analysis.

awscli-plugin-credential-mfa

awscli plugin enabling automatic usage of mfa token