# Awesome Cloud Security [![Awesome](https://cdn.rawgit.com/sindresorhus/awesome/d7305f38d29fed78fa85652e3a63e154dd8e8829/media/badge.svg)](https://github.com/sindresorhus/awesome)
> Cloud Security blogs, podcasts, standards, projects, and examples.
## Contents
* [Public Cloud](#public-cloud-services)
  * [AWS Security](#aws-security)
  * [Azure Security](#azure-security)
  * [Oracle Cloud Security](#oracle-cloud-security)
* [Containers](#containers)
  * [Docker Images](#docker-images)
  * [Kubernetes Operators](#kubernetes-operators)
  * [Tools](#tools)
* [Cloud Security Standards](#cloud-security-standards)
* [Learning](#learning)
  * [Blogs](#blogs)
  * [Podcasts](#podcasts)
  * [Labs](#labs)
* [Certifications](#certifications)
* [Projects](#projects)
  * [Benchmarking](#benchmarking)
  * [Data Loss Prevention](#data-loss-prevention)
  * [Identity and Access Mangement](#identity-and-access-management)
  * [Spring](#spring)
* [Examples](#examples)
  * [Automated Security Assessment](#ex-automated-security-assessment)
  * [Identity and Access Mangement](#ex-identity-and-access-management)
  * [Logging](#ex-logging)
* [Contribute](#contribute)
* [License](#license)
## Public Cloud
## Kubernetes Operators
* [Anchore - Anchore Engine Operator](https://operatorhub.io/operator/anchore-engine)
* [Aqua Security - Aqua Security Operator](https://operatorhub.io/operator/aqua)
* [Aqua Security - Starboard Operator](https://operatorhub.io/operator/starboard-operator)
* [Falco Security - Falco Operator](https://operatorhub.io/operator/falco)
* [Quay - Project Quay Container Security](https://operatorhub.io/operator/project-quay-container-security-operator)
* [Snyk - Snyk Operator](https://operatorhub.io/operator/snyk-operator)
* [Splunk - Splunk Operator for Kubernetes](https://operatorhub.io/operator/splunk)
* [Sysdig - Sysdig Agent Operator](https://operatorhub.io/operator/sysdig)

## Tools
* [Anchore - Anchore Engine](https://github.com/anchore/anchore-engine)
* [Anchore - Grype](https://github.com/anchore/grype)
* [Anchore - Kai](https://github.com/anchore/kai)
* [Anchore - Syft](https://github.com/anchore/syft)
* [Aqua Security - Cloudsploit](https://github.com/aquasecurity/cloudsploit)
* [Aqua Security - Kube-Bench](https://github.com/aquasecurity/kube-bench)
* [Aqua Security - Kube-Hunter](https://github.com/aquasecurity/kube-hunter)
* [Aqua Security - Kubectl-who-can](https://github.com/aquasecurity/kubectl-who-can)
* [Aqua Security - Trivy](https://github.com/aquasecurity/trivy)
* [Docker - Docker Bench for Security](https://github.com/docker/docker-bench-security)
* [Elias - Dagda](https://github.com/eliasgranderubio/dagda/)
* [Falco Security - Falco](https://github.com/falcosecurity/falco)
* [Harbor - Harbor](https://github.com/goharbor/harbor)
* [Quay - Clair](https://github.com/quay/clair)
* [Snyk - Snyk](https://github.com/snyk/snyk)
* [vchinnipilli - Kubestriker](https://github.com/vchinnipilli/kubestriker)
## Cloud Security Standards
* [ISO/IEC 27017:2015](https://www.iso.org/standard/43757.html)
* [MTCS SS 584](https://www.imda.gov.sg/industry-development/infrastructure/ict-standards-and-frameworks/mtcs-certification-scheme/multi-tier-cloud-security-certified-cloud-services)
* [CCM](https://cloudsecurityalliance.org/group/cloud-controls-matrix)
* [NIST 800-53](https://nvd.nist.gov/800-53)
## Learning
### Blogs
* [AWS Security](https://aws.amazon.com/blogs/security/)
### Podcasts
## Projects
### Benchmarking
* [AWS Security Benchmark](https://github.com/awslabs/aws-security-benchmark)
### Data Loss Prevention
* [Git Secrets by awslabs](https://github.com/awslabs/git-secrets)
### Identity and Access Management
* [Aardvark by Netflix](https://github.com/Netflix-Skunkworks/aardvark)
* [Repokid by Netflix](https://github.com/Netflix/Repokid)
### Spring
* [Spring Cloud Security](https://github.com/dschadow/CloudSecurity)
## Examples
### Ex. Automated Security Assessment
* [AWS Config Rules Repository](https://github.com/awslabs/aws-config-rules)
* [AWS Inspector Agent Autodeploy](https://github.com/awslabs/amazon-inspector-agent-autodeploy)
* [AWS Inspector Auto Remediation](https://github.com/awslabs/amazon-inspector-auto-remediate)
* [AWS Inspector Lambda Finding Processor](https://github.com/awslabs/amazon-inspector-finding-forwarder)
### Ex. Identity and Access Management
* [Amazon Cognito Streams connector for Amazon Redshift](https://github.com/awslabs/amazon-cognito-streams-sample)
### Ex. Logging
* [AWS Centralized Logging](https://github.com/awslabs/aws-centralized-logging)
* [AWS Config Snapshots to ElasticSearch](https://github.com/awslabs/aws-config-to-elasticsearch)
* [AWS CloudWatch Events Monitor Security Groups](https://github.com/awslabs/cwe-monitor-secgrp)
### Ex. Web Application Firewall
* [AWS WAF Sample](https://github.com/awslabs/aws-waf-sample)
* [AWS WAF Security Automations](https://github.com/awslabs/aws-waf-security-automations)
## Contribute
Contributions welcome! Read the [contribution guidelines](contributing.md) first.
## License
[![CC0](http://mirrors.creativecommons.org/presskit/buttons/88x31/svg/cc-zero.svg)](http://creativecommons.org/publicdomain/zero/1.0)

To the extent possible under law, Jacob Silva has waived all copyright and
related or neighboring rights to this work.