Awesome Cloud Security

Cloud Security blogs, podcasts, standards, projects, and examples.

Contents

• Public Cloud
• Containers
• Cloud Security Standards
• Learning
  • Blogs
  • Podcasts
• Projects
  • Benchmarking
  • Data Loss Prevention
  • Identity and Access Mangement
  • Spring
• Examples
  • Automated Security Assessment
  • Identity and Access Mangement
  • Logging
• Contribute
• License

Public Cloud

Containers

• Aqua Security - Trivy
• Aqua Security - Cloudsploit
• Aqua Security - Kube-Bench
• Aqua Security - Kube-Hunter
• Aqua Security - Kubectl-who-can
• Docker - Docker Bench for Security
• Harbor - Harbor

Cloud Security Standards

• ISO/IEC 27017:2015
• MTCS SS 584
• CCM
• NIST 800-53

Learning

Blogs

• AWS Security

Podcasts

Projects

Benchmarking

• AWS Security Benchmark

Data Loss Prevention

• Git Secrets by awslabs

Identity and Access Management

• Aardvark by Netflix
• Repokid by Netflix

Spring

• Spring Cloud Security

Examples

Ex. Automated Security Assessment

• AWS Config Rules Repository
• AWS Inspector Agent Autodeploy
• AWS Inspector Auto Remediation
• AWS Inspector Lambda Finding Processor

Ex. Identity and Access Management

• Amazon Cognito Streams connector for Amazon Redshift

Ex. Logging

• AWS Centralized Logging
• AWS Config Snapshots to ElasticSearch
• AWS CloudWatch Events Monitor Security Groups

Ex. Web Application Firewall

• AWS WAF Sample
• AWS WAF Security Automations

Contribute

Contributions welcome! Read the contribution guidelines first.

License

To the extent possible under law, Jacob Silva has waived all copyright and related or neighboring rights to this work.