least-privilege
IAM Policy Analyzer & Fixer
Run AWS Access Analyzer Policy Validation against all your IAM Policies (account-wide)
Generate least-privilege CiliumNetworkPolicy YAML from Hubble audit flows
NHInsight — Open-source security tool to find risky non-human identities, tokens, and CI/CD access paths across AWS, Azure, GCP, GitHub, Kubernetes, and GitHub Actions.