Aws cis benchmark tool free#

Scans your AWS cloud resources and generates reports and includes security best practices. Integrates tools like Scout2 and Prowler among othersĪ small lambda script that will disable access keys older than a given amount of days Platform for continuous compliance monitoring compliance reporting and security automation for the cloud Scans your AWS cloud resources and generates reports Security auditing tool based on several security frameworks (it does some AWS checks) You can also use TrailBlazer as an attack simulation framework.

Trailblazer AWS determine what AWS API calls are logged by CloudTrail and what they are logged as. SkyArk provides advanced discovery and security assessment for the most privileged entities in the tested AWS.įind dangling domains in a multi cloud environment Make a inventory of all your resources across regions (Python)Ĭounts number of resources in categories across regions Works with IPv4/IPv6 Classic/VPC networking and across all AWS services (Ruby)Īdvanced and Automated AWS IAM Evaluation (Python) Scripts and templates guidance related to the AWS CIS Foundation framework (Python)įetch all public IP addresses tied to your AWS account. Helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies (Python) Ice provides insights from a usage and cost perspective with high detail dashboards.Īutomation for Amazon VPC Network Access Analyzer to identify all possible Internet Gateway reachability for your resources across all your AWS accounts Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources Multi-Cloud Security auditing tool for AWS Google Cloud and Azure environments (python) Helps you analyze your AWS environments (Python) Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more. Prowler is an Open Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. This list of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.ĭefensive: Hardening, Security Assessment and Inventory Name

Aws cis benchmark tool free#

Digital Forensics and Incident Responseĭo you want to contribute to this list? Feel free to send a PR and make sure your tool is Open Source.