List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
-
Updated
Oct 2, 2026 - Shell
GeezerVisonThe World Wide Web, restored to 800 pixels of glory. |
| Home|About|Gaming cabinet|Archives|How it works|Starter sites |
GeezerVison is showing github.com — Build software better, together
#
cloudtrailHere are 481 public repositories matching this topic...Language: All
Filter by language
Sort: Most stars
Sort options
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
security auditing cloud aws-lambda incident-response iam dfir cloudtrail aws-infrastructure security-tools aws-inventory
A command-line tool to get valuable information out of AWS CloudTrail
aws security cloud iam heuristic aws-cloudformation aws-cloudtrail cloudtrail hacktoberfest security-automation cloudtrail-consumer cloudtrail-log-analytics iam-actions
AWS Auditing & Hardening Tool
Map visualization and firewall for AWS activity, inspired by Little Snitch for macOS.
Local-first threat hunting for the logs you already have: Zeek, Pi-hole, syslog or the systemd journal, CloudTrail. Every run names the technique behind each detector. No agent, no daemon, no black box - between grep and a SIEM.
python log-analysis syslog self-hosted dfir threat-hunting journald cloudtrail homelab network-security zeek security-tools anomaly-detection pihole blue-team
Terraform module for creating alarms for tracking important changes and occurrences from cloudtrail.
Deploy an high available K3s cluster on Amazon AWS
kubernetes aws devops lambda automation terraform cluster sqs kubernetes-cluster spot-instances k8s high-availability cloudtrail k8s-cluster terraform-module terraform-aws k3s k3s-cluster
Terraform module to provision an AWS CloudTrail and an encrypted S3 bucket with versioning to store CloudTrail logs
Retrospectively tag AWS resources so you can work out who created them
Parse AWS CloudTrail events and send alerts to Slack for events that match pre-configured rules
A serverless, event-driven AWS configuration collection service with configuration versioning.
Several bundled Graylog plugins to integrate with different AWS services like CloudTrail and FlowLogs.
A command line utility that allows you to stream data from multiple S3 objects directly into your terminal
Adaptive AWS Zero Trust Policy made easy: Auto-generate least-privilege policies based on user activity in real time! Accelerate the adoption of smart access control
aws security security-audit cloud permissions iam aws-iam cloudtrail aws-security iam-policy zero-trust cloud-security cloudtrail-logs cloudtrail-log-analytics iam-policies aws-policy zero-trust-security zero-trust-cloud clouddefense
S3 bucket with built in IAM policy to allow CloudTrail logs
Advanced AWS Security Automation Resources: Used by Udemy Course 🎓
aws security lambda automation secret-management cloudtrail guardduty security-hub udemy-course-project
Detect phantom IAM users, decode leaked AWS Bedrock and Claude Platform API keys, and prevent LLMjacking. CLI + SCPs + SIEM detection rules.
python aws incident-response aws-iam sigma cloudtrail aws-security cloud-security aws-organizations api-keys service-control-policy anthropic amazon-bedrock llmjacking
Publicly-listed AWS account IDs for easy lookup. Great for cleaning up false positives from unknown Account IDs in Cloudtrail
Add this topic to your repoTo associate your repository with the cloudtrail topic, visit your repo's landing page and select "manage topics." |
| You are visitor 01402503 — GeezerVison does not store the pages you look up. Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required. |