awesome-cloud-security/README.md

# Awesome Cloud Security [![Awesome](https://cdn.rawgit.com/sindresorhus/awesome/d7305f38d29fed78fa85652e3a63e154dd8e8829/media/badge.svg)](https://github.com/sindresorhus/awesome)
> Cloud Security blogs, podcasts, standards, projects, and examples.
## Contents
* [Public Cloud](#public-cloud-services)
  * [AWS Security](#aws-security)
  * [Azure Security](#azure-security)
  * [Oracle Cloud Security](#oracle-cloud-security)
* [Containers](#containers)
  * [Docker Images](#docker-images)
  * [Kubernetes Operators](#kubernetes-operators)
  * [Tools](#tools)
* [Cloud Security Standards](#cloud-security-standards)
* [Learning](#learning)
  * [Blogs](#blogs)
  * [Podcasts](#podcasts)
  * [Labs](#labs)
* [Certifications](#certifications)
* [Projects](#projects)
  * [Alerting](#alerting)
  * [Benchmarking](#benchmarking)
  * [Data Loss Prevention](#data-loss-prevention)
  * [Identity and Access Mangement](#identity-and-access-management)
  * [Incident Response](#incident-response)
  * [Spring](#spring)
* [Examples](#examples)
  * [Automated Security Assessment](#ex-automated-security-assessment)
  * [Identity and Access Mangement](#ex-identity-and-access-management)
  * [Logging](#ex-logging)
* [Contribute](#contribute)
* [License](#license)
## Public Cloud
### AWS Security
* [AWS CodePipeline Governance](https://github.com/awslabs/aws-codepipeline-governance)
* [AWS Config Rules Development Kit](https://github.com/awslabs/aws-config-rdklib)
* [AWS Control Tower Customizations](https://github.com/awslabs/aws-control-tower-customizations)
* [AWS Security Hub Automated Response and Remediation](https://github.com/awslabs/aws-security-hub-automated-response-and-remediation)
* [AWS Well Architected Labs](https://github.com/awslabs/aws-well-architected-labs)
## Kubernetes Operators
* Aqua
  * [Aqua Security Operator](https://operatorhub.io/operator/aqua)
  * [Starboard Operator](https://operatorhub.io/operator/starboard-operator)
* [Anchore - Anchore Engine Operator](https://operatorhub.io/operator/anchore-engine)
* [Falco Security - Falco Operator](https://operatorhub.io/operator/falco)
* [Quay - Project Quay Container Security](https://operatorhub.io/operator/project-quay-container-security-operator)
* [Snyk - Snyk Operator](https://operatorhub.io/operator/snyk-operator)
* [Splunk - Splunk Operator for Kubernetes](https://operatorhub.io/operator/splunk)
* [Sysdig - Sysdig Agent Operator](https://operatorhub.io/operator/sysdig)

## Tools
* Anchore
  * [ Anchore Engine](https://github.com/anchore/anchore-engine)
  * [Grype](https://github.com/anchore/grype)
  * [Kai](https://github.com/anchore/kai)
  * [Syft](https://github.com/anchore/syft)
* Aqua
  * [Cloudsploit](https://github.com/aquasecurity/cloudsploit)
  * [Kube-Bench](https://github.com/aquasecurity/kube-bench)
  * [Kube-Hunter](https://github.com/aquasecurity/kube-hunter)
  * [Kubectl-who-can](https://github.com/aquasecurity/kubectl-who-can)
  * [Trivy](https://github.com/aquasecurity/trivy)
* [Docker - Docker Bench for Security](https://github.com/docker/docker-bench-security)
* [Elias - Dagda](https://github.com/eliasgranderubio/dagda/)
* [Falco Security - Falco](https://github.com/falcosecurity/falco)
* [Harbor - Harbor](https://github.com/goharbor/harbor)
* [Quay - Clair](https://github.com/quay/clair)
* [Snyk - Snyk](https://github.com/snyk/snyk)
* [vchinnipilli - Kubestriker](https://github.com/vchinnipilli/kubestriker)
## Cloud Security Standards
* [ISO/IEC 27017:2015](https://www.iso.org/standard/43757.html)
* [MTCS SS 584](https://www.imda.gov.sg/industry-development/infrastructure/ict-standards-and-frameworks/mtcs-certification-scheme/multi-tier-cloud-security-certified-cloud-services)
* [CCM](https://cloudsecurityalliance.org/group/cloud-controls-matrix)
* [NIST 800-53](https://nvd.nist.gov/800-53)
## Learning
### Blogs
* [AWS Security](https://aws.amazon.com/blogs/security/)
### Podcasts
## Projects
### Alerting
* [411 by Etsy](https://github.com/etsy/411)
* [ElastAlert by Yelp](https://github.com/Yelp/elastalert)
* [StreamAlert by Airbnb](https://github.com/airbnb/streamalert)
### Benchmarking
* [AWS Security Benchmark](https://github.com/awslabs/aws-security-benchmark)
### Data Loss Prevention
* [Git Secrets by AWS Labs](https://github.com/awslabs/git-secrets)
### Identity and Access Management
* Awesome Lists
  * [Awesome IAM List](https://github.com/kdeldycke/awesome-iam)
* AWS Labs
  * [AWS IAM Generator](https://github.com/awslabs/aws-iam-generator)
* Duo Labs
  * [Parliament](https://github.com/duo-labs/parliament)
  * [CloudTracker](https://github.com/duo-labs/cloudtracker)
* Netflix
  * [Aardvark](https://github.com/Netflix-Skunkworks/aardvark)
  * [ConsoleMe](https://github.com/Netflix/consoleme)
  * [Repokid](https://github.com/Netflix/Repokid)
* Salesforce
  * [Policy Sentry](https://github.com/salesforce/policy_sentry/)
  * [CloudSplaining](https://github.com/salesforce/cloudsplaining)
  * [AWS-AllowLister](https://github.com/salesforce/aws-allowlister)
  * [Terraform for Policy Guru](https://github.com/salesforce/terraform-provider-policyguru)
* [Kubernetes AWS IAM Authenticator by Kubernetes SIG](https://github.com/kubernetes-sigs/aws-iam-authenticator)
* [AWS Missing Tools by CloudAvail](https://github.com/cloudavail/aws-missing-tools)
* [Enumerate IAM by Andres Riancho](https://github.com/andresriancho/enumerate-iam)
### Incident Response
* [PagerDuty Incident Response Docs](https://github.com/PagerDuty/incident-response-docs)
* [Awesome Incident Response List](https://github.com/meirwah/awesome-incident-response)
* [Dispatch by Netflix](https://github.com/Netflix/dispatch)
* [AWS Incident Response Playbooks by AWS Samples](https://github.com/aws-samples/aws-incident-response-playbooks)
* [AWS Security Hub Automated Response and Remediation](https://github.com/awslabs/aws-security-hub-automated-response-and-remediation)
### Spring
* [Spring Cloud Security](https://github.com/dschadow/CloudSecurity)
## Examples
### Ex. Automated Security Assessment
* [AWS Config Rules Repository](https://github.com/awslabs/aws-config-rules)
* [AWS Inspector Agent Autodeploy](https://github.com/awslabs/amazon-inspector-agent-autodeploy)
* [AWS Inspector Auto Remediation](https://github.com/awslabs/amazon-inspector-auto-remediate)
* [AWS Inspector Lambda Finding Processor](https://github.com/awslabs/amazon-inspector-finding-forwarder)
### Ex. Identity and Access Management
* [Amazon Cognito Streams connector for Amazon Redshift](https://github.com/awslabs/amazon-cognito-streams-sample)
### Ex. Logging
* [AWS Centralized Logging](https://github.com/awslabs/aws-centralized-logging)
* [AWS Config Snapshots to ElasticSearch](https://github.com/awslabs/aws-config-to-elasticsearch)
* [AWS CloudWatch Events Monitor Security Groups](https://github.com/awslabs/cwe-monitor-secgrp)
### Ex. Web Application Firewall
* [AWS WAF Sample](https://github.com/awslabs/aws-waf-sample)
* [AWS WAF Security Automations](https://github.com/awslabs/aws-waf-security-automations)
## Contribute
Contributions welcome! Read the [contribution guidelines](contributing.md) first.
## License
[![CC0](http://mirrors.creativecommons.org/presskit/buttons/88x31/svg/cc-zero.svg)](http://creativecommons.org/publicdomain/zero/1.0)

To the extent possible under law, Jacob Silva has waived all copyright and
related or neighboring rights to this work.
Formatting 2017-05-28 19:49:36 -04:00			`# Awesome Cloud Security [![Awesome](https://cdn.rawgit.com/sindresorhus/awesome/d7305f38d29fed78fa85652e3a63e154dd8e8829/media/badge.svg)](https://github.com/sindresorhus/awesome)`
Cloud Security Standards - Init 2017-05-29 07:53:05 -04:00			`> Cloud Security blogs, podcasts, standards, projects, and examples.`
Formatting 2017-05-28 19:49:36 -04:00			`## Contents`
Container Tools 2021-06-03 12:39:59 -04:00			`* [Public Cloud](#public-cloud-services)`
			`* [AWS Security](#aws-security)`
			`* [Azure Security](#azure-security)`
			`* [Oracle Cloud Security](#oracle-cloud-security)`
ReOrganize 2021-05-29 13:45:59 -04:00			`* [Containers](#containers)`
Container Tools 2021-06-03 12:39:59 -04:00			`* [Docker Images](#docker-images)`
			`* [Kubernetes Operators](#kubernetes-operators)`
			`* [Tools](#tools)`
Cloud Security Standards - Init 2017-05-29 07:53:05 -04:00			`* [Cloud Security Standards](#cloud-security-standards)`
ReOrganize 2021-05-29 13:45:59 -04:00			`* [Learning](#learning)`
			`* [Blogs](#blogs)`
			`* [Podcasts](#podcasts)`
Container Tools 2021-06-03 12:39:59 -04:00			`* [Labs](#labs)`
			`* [Certifications](#certifications)`
Fix ToC 2017-05-28 19:33:51 -04:00			`* [Projects](#projects)`
Security Projects - Add Alerting and IAM 2021-07-15 11:59:25 -04:00			`* [Alerting](#alerting)`
Restructuring 2017-05-28 20:02:32 -04:00			`* [Benchmarking](#benchmarking)`
Projects - Spring Cloud Security 2017-05-29 08:01:51 -04:00			`* [Data Loss Prevention](#data-loss-prevention)`
Netflix 2017-06-06 07:42:11 -04:00			`* [Identity and Access Mangement](#identity-and-access-management)`
IAM and Incident Response 2021-07-15 15:17:32 -04:00			`* [Incident Response](#incident-response)`
Projects - Spring Cloud Security 2017-05-29 08:01:51 -04:00			`* [Spring](#spring)`
Fix ToC 2017-05-28 19:33:51 -04:00			`* [Examples](#examples)`
Netflix 2017-06-06 07:42:11 -04:00			`* [Automated Security Assessment](#ex-automated-security-assessment)`
Formatting 2017-06-06 07:43:25 -04:00			`* [Identity and Access Mangement](#ex-identity-and-access-management)`
Netflix 2017-06-06 07:42:11 -04:00			`* [Logging](#ex-logging)`
Formatting 2017-05-28 19:49:36 -04:00			`* [Contribute](#contribute)`
			`* [License](#license)`
ReOrganize 2021-05-29 13:45:59 -04:00			`## Public Cloud`
AWS Security Updates 2021-07-16 16:35:09 -04:00			`### AWS Security`
			`* [AWS CodePipeline Governance](https://github.com/awslabs/aws-codepipeline-governance)`
			`* [AWS Config Rules Development Kit](https://github.com/awslabs/aws-config-rdklib)`
			`* [AWS Control Tower Customizations](https://github.com/awslabs/aws-control-tower-customizations)`
			`* [AWS Security Hub Automated Response and Remediation](https://github.com/awslabs/aws-security-hub-automated-response-and-remediation)`
			`* [AWS Well Architected Labs](https://github.com/awslabs/aws-well-architected-labs)`
Container Tools 2021-06-03 12:39:59 -04:00			`## Kubernetes Operators`
Reformat 2021-07-15 15:49:42 -04:00			`* Aqua`
			`* [Aqua Security Operator](https://operatorhub.io/operator/aqua)`
			`* [Starboard Operator](https://operatorhub.io/operator/starboard-operator)`
Container Tools 2021-06-03 12:39:59 -04:00			`* [Anchore - Anchore Engine Operator](https://operatorhub.io/operator/anchore-engine)`
			`* [Falco Security - Falco Operator](https://operatorhub.io/operator/falco)`
			`* [Quay - Project Quay Container Security](https://operatorhub.io/operator/project-quay-container-security-operator)`
			`* [Snyk - Snyk Operator](https://operatorhub.io/operator/snyk-operator)`
			`* [Splunk - Splunk Operator for Kubernetes](https://operatorhub.io/operator/splunk)`
			`* [Sysdig - Sysdig Agent Operator](https://operatorhub.io/operator/sysdig)`

			`## Tools`
Reformat 2021-07-15 15:49:42 -04:00			`* Anchore`
			`* [ Anchore Engine](https://github.com/anchore/anchore-engine)`
			`* [Grype](https://github.com/anchore/grype)`
			`* [Kai](https://github.com/anchore/kai)`
			`* [Syft](https://github.com/anchore/syft)`
			`* Aqua`
			`* [Cloudsploit](https://github.com/aquasecurity/cloudsploit)`
			`* [Kube-Bench](https://github.com/aquasecurity/kube-bench)`
			`* [Kube-Hunter](https://github.com/aquasecurity/kube-hunter)`
			`* [Kubectl-who-can](https://github.com/aquasecurity/kubectl-who-can)`
			`* [Trivy](https://github.com/aquasecurity/trivy)`
ReOrganize 2021-05-29 15:07:14 -04:00			`* [Docker - Docker Bench for Security](https://github.com/docker/docker-bench-security)`
Container Tools 2021-06-03 12:39:59 -04:00			`* [Elias - Dagda](https://github.com/eliasgranderubio/dagda/)`
			`* [Falco Security - Falco](https://github.com/falcosecurity/falco)`
ReOrganize 2021-05-29 15:07:14 -04:00			`* [Harbor - Harbor](https://github.com/goharbor/harbor)`
Container Tools 2021-06-03 12:39:59 -04:00			`* [Quay - Clair](https://github.com/quay/clair)`
			`* [Snyk - Snyk](https://github.com/snyk/snyk)`
			`* [vchinnipilli - Kubestriker](https://github.com/vchinnipilli/kubestriker)`
Cloud Security Standards - Init 2017-05-29 07:53:05 -04:00			`## Cloud Security Standards`
			`* [ISO/IEC 27017:2015](https://www.iso.org/standard/43757.html)`
			`* [MTCS SS 584](https://www.imda.gov.sg/industry-development/infrastructure/ict-standards-and-frameworks/mtcs-certification-scheme/multi-tier-cloud-security-certified-cloud-services)`
Cloud Security Standards - Fix 2017-05-29 07:56:44 -04:00			`* [CCM](https://cloudsecurityalliance.org/group/cloud-controls-matrix)`
Cloud Security Standards - Init 2017-05-29 07:53:05 -04:00			`* [NIST 800-53](https://nvd.nist.gov/800-53)`
ReOrganize 2021-05-29 13:45:59 -04:00			`## Learning`
			`### Blogs`
			`* [AWS Security](https://aws.amazon.com/blogs/security/)`
			`### Podcasts`
Init 2017-05-28 19:31:47 -04:00			`## Projects`
Security Projects - Add Alerting and IAM 2021-07-15 11:59:25 -04:00			`### Alerting`
			`* [411 by Etsy](https://github.com/etsy/411)`
			`* [ElastAlert by Yelp](https://github.com/Yelp/elastalert)`
			`* [StreamAlert by Airbnb](https://github.com/airbnb/streamalert)`
Projects - Spring Cloud Security 2017-05-29 08:01:51 -04:00			`### Benchmarking`
			`* [AWS Security Benchmark](https://github.com/awslabs/aws-security-benchmark)`
Restructuring 2017-05-28 20:02:32 -04:00			`### Data Loss Prevention`
AWS Security Updates 2021-07-16 16:35:09 -04:00			`* [Git Secrets by AWS Labs](https://github.com/awslabs/git-secrets)`
Netflix 2017-06-06 07:42:11 -04:00			`### Identity and Access Management`
Reformat 2021-07-15 15:49:42 -04:00			`* Awesome Lists`
			`* [Awesome IAM List](https://github.com/kdeldycke/awesome-iam)`
			`* AWS Labs`
			`* [AWS IAM Generator](https://github.com/awslabs/aws-iam-generator)`
			`* Duo Labs`
			`* [Parliament](https://github.com/duo-labs/parliament)`
			`* [CloudTracker](https://github.com/duo-labs/cloudtracker)`
			`* Netflix`
			`* [Aardvark](https://github.com/Netflix-Skunkworks/aardvark)`
			`* [ConsoleMe](https://github.com/Netflix/consoleme)`
			`* [Repokid](https://github.com/Netflix/Repokid)`
			`* Salesforce`
			`* [Policy Sentry](https://github.com/salesforce/policy_sentry/)`
			`* [CloudSplaining](https://github.com/salesforce/cloudsplaining)`
			`* [AWS-AllowLister](https://github.com/salesforce/aws-allowlister)`
			`* [Terraform for Policy Guru](https://github.com/salesforce/terraform-provider-policyguru)`
IAM and Incident Response 2021-07-15 15:17:32 -04:00			`* [Kubernetes AWS IAM Authenticator by Kubernetes SIG](https://github.com/kubernetes-sigs/aws-iam-authenticator)`
			`* [AWS Missing Tools by CloudAvail](https://github.com/cloudavail/aws-missing-tools)`
			`* [Enumerate IAM by Andres Riancho](https://github.com/andresriancho/enumerate-iam)`
			`### Incident Response`
			`* [PagerDuty Incident Response Docs](https://github.com/PagerDuty/incident-response-docs)`
			`* [Awesome Incident Response List](https://github.com/meirwah/awesome-incident-response)`
			`* [Dispatch by Netflix](https://github.com/Netflix/dispatch)`
			`* [AWS Incident Response Playbooks by AWS Samples](https://github.com/aws-samples/aws-incident-response-playbooks)`
AWS Security Updates 2021-07-16 16:35:09 -04:00			`* [AWS Security Hub Automated Response and Remediation](https://github.com/awslabs/aws-security-hub-automated-response-and-remediation)`
Projects - Spring Cloud Security 2017-05-29 08:01:51 -04:00			`### Spring`
			`* [Spring Cloud Security](https://github.com/dschadow/CloudSecurity)`
Restructuring 2017-05-28 20:02:32 -04:00			`## Examples`
Netflix 2017-06-06 07:42:11 -04:00			`### Ex. Automated Security Assessment`
Init 2017-05-28 19:31:47 -04:00			`* [AWS Config Rules Repository](https://github.com/awslabs/aws-config-rules)`
			`* [AWS Inspector Agent Autodeploy](https://github.com/awslabs/amazon-inspector-agent-autodeploy)`
			`* [AWS Inspector Auto Remediation](https://github.com/awslabs/amazon-inspector-auto-remediate)`
			`* [AWS Inspector Lambda Finding Processor](https://github.com/awslabs/amazon-inspector-finding-forwarder)`
Formatting 2017-06-06 07:43:25 -04:00			`### Ex. Identity and Access Management`
			`* [Amazon Cognito Streams connector for Amazon Redshift](https://github.com/awslabs/amazon-cognito-streams-sample)`
Netflix 2017-06-06 07:42:11 -04:00			`### Ex. Logging`
Init 2017-05-28 19:31:47 -04:00			`* [AWS Centralized Logging](https://github.com/awslabs/aws-centralized-logging)`
			`* [AWS Config Snapshots to ElasticSearch](https://github.com/awslabs/aws-config-to-elasticsearch)`
			`* [AWS CloudWatch Events Monitor Security Groups](https://github.com/awslabs/cwe-monitor-secgrp)`
Netflix 2017-06-06 07:42:11 -04:00			`### Ex. Web Application Firewall`
Init 2017-05-28 19:31:47 -04:00			`* [AWS WAF Sample](https://github.com/awslabs/aws-waf-sample)`
Formatting 2017-05-28 19:49:36 -04:00			`* [AWS WAF Security Automations](https://github.com/awslabs/aws-waf-security-automations)`
			`## Contribute`
			`Contributions welcome! Read the [contribution guidelines](contributing.md) first.`
			`## License`
			`[![CC0](http://mirrors.creativecommons.org/presskit/buttons/88x31/svg/cc-zero.svg)](http://creativecommons.org/publicdomain/zero/1.0)`

			`To the extent possible under law, Jacob Silva has waived all copyright and`
			`related or neighboring rights to this work.`