Awesome Cloud Security

Cloud Security blogs, podcasts, standards, projects, and examples.

Contents

• Public Cloud
  • AWS Security
  • Azure Security
  • Oracle Cloud Security
• Containers
  • Docker Images
  • Kubernetes Operators
  • Tools
• Cloud Security Standards
• Learning
  • Blogs
  • Podcasts
  • Labs
• Certifications
• Projects
  • Alerting
  • Benchmarking
  • Data Loss Prevention
  • Identity and Access Mangement
  • Incident Response
  • Spring
• Examples
  • Automated Security Assessment
  • Identity and Access Mangement
  • Logging
• Contribute
• License

Public Cloud

Kubernetes Operators

• Anchore - Anchore Engine Operator
• Aqua Security - Aqua Security Operator
• Aqua Security - Starboard Operator
• Falco Security - Falco Operator
• Quay - Project Quay Container Security
• Snyk - Snyk Operator
• Splunk - Splunk Operator for Kubernetes
• Sysdig - Sysdig Agent Operator

Tools

• Anchore - Anchore Engine
• Anchore - Grype
• Anchore - Kai
• Anchore - Syft
• Aqua Security - Cloudsploit
• Aqua Security - Kube-Bench
• Aqua Security - Kube-Hunter
• Aqua Security - Kubectl-who-can
• Aqua Security - Trivy
• Docker - Docker Bench for Security
• Elias - Dagda
• Falco Security - Falco
• Harbor - Harbor
• Quay - Clair
• Snyk - Snyk
• vchinnipilli - Kubestriker

Cloud Security Standards

• ISO/IEC 27017:2015
• MTCS SS 584
• CCM
• NIST 800-53

Learning

Blogs

• AWS Security

Podcasts

Projects

Alerting

• 411 by Etsy
• ElastAlert by Yelp
• StreamAlert by Airbnb

Benchmarking

• AWS Security Benchmark

Data Loss Prevention

• Git Secrets by awslabs

Identity and Access Management

• Aardvark by Netflix
• ConsoleMe by Netflix
• Repokid by Netflix
• Policy Sentry by Salesforce
• CloudSplaining by Salesforce
• AWS-AllowLister by Salesforce
• Terraform for Policy Guru by Salesforce
• Kubernetes AWS IAM Authenticator by Kubernetes SIG
• Parliament by Duo Labs
• CloudTracker by Duo Labs
• AWS Missing Tools by CloudAvail
• Enumerate IAM by Andres Riancho
• Awesome IAM List
• AWS IAM Generator by AWS Labs

Incident Response

• PagerDuty Incident Response Docs
• Awesome Incident Response List
• Dispatch by Netflix
• AWS Incident Response Playbooks by AWS Samples

Spring

• Spring Cloud Security

Examples

Ex. Automated Security Assessment

• AWS Config Rules Repository
• AWS Inspector Agent Autodeploy
• AWS Inspector Auto Remediation
• AWS Inspector Lambda Finding Processor

Ex. Identity and Access Management

• Amazon Cognito Streams connector for Amazon Redshift

Ex. Logging

• AWS Centralized Logging
• AWS Config Snapshots to ElasticSearch
• AWS CloudWatch Events Monitor Security Groups

Ex. Web Application Firewall

• AWS WAF Sample
• AWS WAF Security Automations

Contribute

Contributions welcome! Read the contribution guidelines first.

License

To the extent possible under law, Jacob Silva has waived all copyright and related or neighboring rights to this work.