cloud-audit
Find AWS attack chains and get exact fixes.
Free3,083 impressions#5 of its week
Open-source AWS security scanner that maps findings into attack chains and provides copy-paste remediation commands.
- for
- DevOps, SREs, small teams and consultants needing AWS security insights
- pricing
- open source
- license
- MIT
Key features
- Attack Chain Correlation — Groups individual findings into exploitable attack paths using 31 MITRE ATT&CK rules.
- IAM Privilege Escalation Detection — Detects 64 escalation methods, including trust-graph traversal and policy mutations.
- What-If Remediation Simulator — Shows impact of a fix before applying changes with a copy-paste CLI command.
- Agent-Blast Threat Modeling — Simulates hijacked Bedrock Agents or AgentCore runtimes to reveal potential reach and proof via IAM simulator.
- Compliance Engine — Maps findings to six frameworks (CIS AWS v3.0, SOC 2, ISO 27001, etc.) with per-control evidence.
- Remediation Output — Generates ready-to-use AWS CLI and Terraform snippets for every finding.
Use cases
- Generate a compliance report for an audit in one command
- Gate CI/CD pipelines with automated AWS security checks
- Assess the blast radius of a compromised IAM role
- Simulate remediation impact before changing production resources
cloud-audit FAQ
How does cloud-audit differ from typical AWS scanners?+
It not only lists findings but also correlates them into attack chains, provides privilege-escalation paths, and offers copy-paste remediation.
Can I run scans without AWS credentials?+
Yes, using the demo mode (`cloud-audit demo`) which generates sample data for exploration.
What output formats are available for CI/CD integration?+
The tool provides exit codes, SARIF reports, and can be used in GitHub Actions for gating deployments.
Is the scanner read-only?+
All operations are read-only; it never makes changes to your account.
How are remediation commands generated?+
Each finding includes ready-to-use AWS CLI commands and Terraform HCL snippets.
Summarized by DevHunt from haitmg.pl · Oct 1, 2026. Details may change; check the official site.
