A NodeJS/TypeScript library designed to generate IAM Policy Actions Statements for AWS services within the AWS CDK framework. The library provides predefined constants that enable autocompletion functionality when working with IAM policies. It includes a factory class that simplifies the creation of AWS CDK PolicyStatement objects. The tool can be integrated into AWS CDK stack scripts or used as a standalone utility for IAM policy management. It focuses on streamlining the process of handling IAM policies by providing structured approaches to policy statement generation. The library supports TypeScript development environments and offers programmatic access to AWS service-specific IAM actions through its constant definitions.
FEATURES
SIMILAR TOOLS
A Docker security vulnerability where disabling inter-container communication (ICC) fails to block raw ethernet frames, allowing unexpected data transfer between containers via raw sockets.
A community-driven repository of pre-built security analytics queries and rules for monitoring and detecting threats in Google Cloud environments across various log sources and activity types.
TerraGoat is a deliberately vulnerable Terraform repository that demonstrates common cloud infrastructure misconfigurations for training and testing security tools.
Kube-bench is a security assessment tool that validates Kubernetes deployments against CIS Kubernetes Benchmark standards through automated configuration checks.
A setuid implementation of user namespaces that enables running unprivileged containers without root privileges as a secure alternative to traditional container runtimes.
A framework for analyzing container images, running scripts inside containers, and gathering information for static analysis and policy enforcement.
Cloudmarker is a configurable cloud monitoring tool and framework that audits Azure and GCP environments by retrieving, analyzing, and alerting on cloud security data.
LambdaGuard is an AWS Lambda auditing tool that provides security configuration checks, statistical analysis, and service dependency mapping for serverless functions.
FestIn discovers open S3 buckets associated with a domain using crawling and DNS reconnaissance techniques.