Alternatives to Cloudsplaining
A command-line tool that assesses AWS IAM policies for excessive permissions and security risks. Notes say what changes if you switch.
The original
Cloudsplaining
A command-line tool that assesses AWS IAM policies for excessive permissions and security risks.
8 alternatives
Most similar to Cloudsplaining first.
Principal Mapper
A command-line tool that maps AWS IAM permissions to identify risky access paths.
Policy Sentry
A command-line tool that generates and audits least-privilege policies for AWS IAM.
Policy Sentry also audits AWS IAM policies, while adding least-privilege policy generation; it is a command-line tool and is free and open source.
IAM Policy Validator for Terraform
A command-line tool that checks IAM policies in Terraform templates using AWS Access Analyzer.
ScoutSuite
A command-line tool that audits cloud configurations and highlights security risks across multiple providers.
TrailScraper
A command-line toolkit for searching AWS CloudTrail events and working with IAM policies.
IAMy
A command-line tool that exports AWS IAM configuration to YAML and applies changes from YAML files.
Prowler
Check cloud environments for security configuration issues.
aws-rotate-key
A command-line utility that guides users through rotating AWS access keys in their credentials file.
