cloud-audit

AWS security scanner that correlates findings into real attack paths and generates copy-paste remediation (AWS CLI + Terraform). 80 checks across 18 AWS services. 20 attack chain rules based on MITRE ATT&CK. CIS AWS v3.0 compliance engine. Scan diff for CI/CD regression detection. Featured in Help Net Security (https://www.helpnetsecurity.com/2026/03/11/cloud-audit-open-source-aws-security-scanner/). MIT license. Python CLI, Docker, and GitHub Action.