Cloud Security Python Packages

cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

4.1M 2K 217

agent-bom

AI supply-chain & cloud security scanner and self-hosted control plane — agents, MCP, packages, cloud estate, non-human identities, and LLM cost. SBOM/SARIF, graph attack-paths, runtime enforcement, and compliance evidence.

13K 25 7

cloud-audit

Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.

3K 64 13

cleancloud

The cloud hygiene platform - including AI and GPU infrastructure

3K 118 9

s3-security-scanner

AWS S3 security scanner: detect public access, weak bucket policies, missing encryption and compliance gaps across your buckets. Python CLI with multi-format reports.

2K 5 1

terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

2K 5K 553

kosty

Scan 30+ AWS services. Find cost waste. Detect security gaps. Map your attack surface. One command.

2K 270 24

arnmatch

Most complete AWS ARN parser. Automatically generated from AWS docs to map 2,100+ resources to CloudFormation, Tagging API, and boto3.

2K 0 0

awsmap

A fast, comprehensive tool for mapping and inventorying AWS resources across 150+ services and all regions.

1K 95 13

consoleme

A central control plane for AWS permissions and access

1K 3K 282

ec2-security-scanner

AWS EC2 security scanner: 46 checks across 8 categories (IMDSv2, security groups, EBS encryption, public AMIs, IAM, patching), UserData secret detection, and compliance mapping for FSBP, CIS, PCI DSS, HIPAA, SOC 2, ISO 27001 and NIST.

1K 4 0

lambda-security-scanner

A comprehensive AWS Lambda security scanner with multi-framework compliance mapping

1K 2 0

ciph

Fast, streaming file encryption for large media files and cloud uploads using modern cryptography.

970 3 0

hsed

Unix chmod-inspired permission model for cryptographic operations

947 0 0

aiopsone-assure

APRA CPS 234 / CPS 230 AWS compliance evidence from your terminal — security findings to a board-ready narrative report.

906 0 0

bedrock-keys-security

Detect phantom IAM users, decode leaked AWS Bedrock and Claude Platform API keys, and prevent LLMjacking. CLI + SCPs + SIEM detection rules.

845 33 2

stackql-mcp-server

Query, provision and operate Cloud, SaaS, API and Model Context Protocol (MCP) resources through a unified SQL-based framework for humans and AI agents.

767 861 80

az-rbac-watch

Azure RBAC as Code — drift detection and guardrails

657 1 0

aws-allowlister

Automatically compile an AWS Service Control Policy that ONLY allows AWS services that are compliant with your preferred compliance frameworks.

657 224 29

threatmap

IaC threat modeler with STRIDE, MITRE ATT&CK, and PASTA frameworks. REST API, GraphQL, and Docker support for Terraform, CloudFormation, and Kubernetes.

520 60 9