-
Notifications
You must be signed in to change notification settings - Fork 5
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
1 changed file
with
30 additions
and
27 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,32 +1,35 @@ | ||
Full inventory: | ||
https://github.com/cloud-custodian/cloud-custodian - CapOne multicloud rules engine. | ||
https://github.com/Netflix/edda - AWS API cache. | ||
https://github.com/Netflix/security_monkey - EOL'd. Support AWS, GCP, Github. | ||
https://github.com/devops-israel/aws-inventory - Client/browser side inventory. | ||
## Full inventory | ||
* https://github.com/cloud-custodian/cloud-custodian - CapOne multicloud rules engine. | ||
* https://github.com/Netflix/edda - Edda is a service that polls your AWS resources via AWS APIs and records the results. It allows you to quickly search through your resources and shows you how they have changed over time. | ||
* https://github.com/Netflix/security_monkey - EOL'd. Support AWS, GCP, Github. | ||
* https://github.com/devops-israel/aws-inventory - Client/browser side inventory. | ||
* https://github.com/turbot/steampipe | ||
* https://github.com/cloudquery/cloudquery | ||
|
||
Sec/compliance scanners: | ||
https://github.com/toniblyx/prowler - AWS CIS + extras scanner. | ||
https://github.com/nccgroup/ScoutSuite | ||
https://github.com/dowjones/hammer | ||
https://github.com/prezi/reddalert - AWS risky security change detector built atop EDDA. | ||
https://docs.chef.io/inspec/ | ||
## Sec/compliance scanners | ||
* https://github.com/toniblyx/prowler - AWS CIS + extras scanner. | ||
* https://github.com/nccgroup/ScoutSuite | ||
* https://github.com/dowjones/hammer | ||
* https://github.com/prezi/reddalert - AWS risky security change detector built atop EDDA. | ||
* https://docs.chef.io/inspec/ | ||
* https://github.com/RhinoSecurityLabs/pacu | ||
|
||
Service specific tools: | ||
Instacart - S3 - https://github.com/ankane/s3tk | ||
Salesforce - IAM - https://github.com/salesforce/cloudsplaining | ||
Duo - IAM linter - https://github.com/duo-labs/parliament/ | ||
Billing ELK - https://github.com/ProTip/aws-elk-billing | ||
## Service specific tools | ||
* Instacart - S3 - https://github.com/ankane/s3tk | ||
* Salesforce - IAM - https://github.com/salesforce/cloudsplaining | ||
* Duo - IAM linter - https://github.com/duo-labs/parliament/ | ||
* Billing ELK - https://github.com/ProTip/aws-elk-billing | ||
|
||
Platform specific config tools: | ||
AWS - https://aws.amazon.com/config/ | ||
AWS - https://github.com/awslabs/aws-config-resource-schema | ||
GCP - https://cloud.google.com/asset-inventory/docs/overview | ||
## Platform specific config tools | ||
* AWS - https://aws.amazon.com/config/ | ||
* AWS - https://github.com/awslabs/aws-config-resource-schema | ||
* GCP - https://cloud.google.com/asset-inventory/docs/overview | ||
|
||
Inverse terraformers/IAC tools: | ||
https://github.com/fugue/regula - Checks Terraform for AWS, Azure and GCP security and CIS compliance using opa/rego. | ||
https://github.com/GoogleCloudPlatform/terraformer | ||
https://github.com/cycloidio/terracognita | ||
https://github.com/dtan4/terraforming | ||
## Inverse terraformers/IAC tools | ||
* https://github.com/fugue/regula - Checks Terraform for AWS, Azure and GCP security and CIS compliance using opa/rego. | ||
* https://github.com/GoogleCloudPlatform/terraformer | ||
* https://github.com/cycloidio/terracognita | ||
* https://github.com/dtan4/terraforming | ||
|
||
Misc: | ||
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples | ||
## Misc | ||
* https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/rql-examples |