awesome-cloud-security/README.md

Awesome Cloud Security

Cloud Security blogs, podcasts, standards, projects, and examples.

Contents

• Public Cloud Governance
  • AWS Governance
• Containers
  • Docker Images
  • Kubernetes Operators
  • Container Tools
• Cloud Security Standards
• Learning
  • Blogs
  • Courses
  • Labs
  • Podcasts
• Certifications
• Projects
  • Alerting
  • Benchmarking
  • Data Loss Prevention
  • Identity and Access Mangement
  • Incident Response
  • Spring
• Examples
  • Automated Security Assessment
  • Identity and Access Mangement
  • Logging
• Misc
  • Other Awesome Lists
• Contribute
• License

Public Cloud Governance

AWS Governance

• AWS CodePipeline Governance
• AWS Config Rules Development Kit
• AWS Control Tower Customizations
• AWS Security Hub Automated Response and Remediation
• AWS Well Architected Labs

Kubernetes Operators

• Aqua
  • Aqua Security Operator
  • Starboard Operator
• Anchore - Anchore Engine Operator
• Falco Security - Falco Operator
• Quay - Project Quay Container Security
• Snyk - Snyk Operator
• Splunk - Splunk Operator for Kubernetes
• Sysdig - Sysdig Agent Operator

Container Tools

• Anchore
  • Anchore Engine
  • Grype
  • Kai
  • Syft
• Aqua
  • Cloudsploit
  • Kube-Bench
  • Kube-Hunter
  • Kubectl-who-can
  • Trivy
• Docker - Docker Bench for Security
• Elias - Dagda
• Falco Security - Falco
• Harbor - Harbor
• Quay - Clair
• Snyk - Snyk
• vchinnipilli - Kubestriker

Cloud Security Standards

• ISO/IEC 27017:2015
• MTCS SS 584
• CCM
• NIST 800-53

Learning

Blogs

• AWS Security
• Azure Security
• Dark Reading

Courses

• Oracle Cloud Security Administrator

Labs

• PagerDuty Security Training

Podcasts

• Security Now
• Azure DevOps Podcast

Certifications

• Cloud Vendors
  • AWS Certified Security Specialty
  • Azure Security Engineer Associate
  • Google Professional Cloud Security Engineer
  • Oracle Cloud Platform Identity and Security Management
• ISC² - International Information System Security Certification Consortium
  • CCSP - Certified Cloud Security Professional
• CSA - Cloud Security Alliance
  • CCSK - Certificate of Cloud Security Knowledge
  • CCAK - Certificate of Cloud Auditing Knowledge

Projects

Alerting

• 411 by Etsy
• ElastAlert by Yelp
• StreamAlert by Airbnb

Benchmarking

• AWS Security Benchmark

Data Loss Prevention

• Git Secrets by AWS Labs

Identity and Access Management

• AWS Labs
  • AWS IAM Generator
• Duo Labs
  • Parliament
  • CloudTracker
• Netflix
  • Aardvark
  • ConsoleMe
  • Repokid
• Salesforce
  • Policy Sentry
  • CloudSplaining
  • AWS-AllowLister
  • Terraform for Policy Guru
• Misc
  • AWS Missing Tools by CloudAvail
  • Awesome IAM List
  • Enumerate IAM by Andres Riancho
  • Kubernetes AWS IAM Authenticator by Kubernetes SIG

Incident Response

• AWS
  • AWS Incident Response Playbooks by AWS Samples
  • AWS Security Hub Automated Response and Remediation
• Netflix
  • Dispatch by Netflix
• PagerDuty
  • PagerDuty Automated Remediation Docs
  • PagerDuty Business Response Docs
  • PagerDuty DevSecOps Docs
  • PagerDuty Full Case Ownership Docs
  • PagerDuty Full Service Ownership Docs
  • PagerDuty Going OnCall Docs
  • PagerDuty Incident Response Docs
  • PagerDuty Operational Review Docs
  • PagerDuty PostMortem Docs
  • PagerDuty Retrospectives Docs
  • PagerDuty Stakeholder Communication Docs

Spring

• Spring Cloud Security

Examples

Ex. Automated Security Assessment

• AWS Config Rules Repository
• AWS Inspector Agent Autodeploy
• AWS Inspector Auto Remediation
• AWS Inspector Lambda Finding Processor

Ex. Identity and Access Management

• Amazon Cognito Streams connector for Amazon Redshift

Ex. Logging

• AWS Centralized Logging
• AWS Config Snapshots to ElasticSearch
• AWS CloudWatch Events Monitor Security Groups

Ex. Web Application Firewall

• AWS WAF Sample
• AWS WAF Security Automations

Misc

• Other Awesome Lists
  • Awesome Cloud Native Security
  • Awesome Cloud Security
  • Awesome IAM List
  • Awesome Incident Response List
  • Awesome Shodan Queries

Contribute

Contributions welcome! Read the contribution guidelines first.

License

To the extent possible under law, Jacob Silva has waived all copyright and related or neighboring rights to this work.