Listing of tools I found useful or interesting.
- https://github.com/antonbabenko/terraform-best-practices Terraform best practices (https://www.terraform-best-practices.com/).
- https://github.com/antonbabenko/terraform-best-practices-workshop Terraform best practices - workshop materials.
- https://github.com/antonbabenko/pre-commit-terraform pre-commit git hooks to take care of Terraform configurations.
- https://github.com/segmentio/terraform-docs Generate documentation from Terraform modules in various output formats.
- https://github.com/tfutils/tfenv Terraform version manager inspired by rbenv
- https://github.com/coinbase/terraform-landscape Improve Terraform's plan output to be easier to read and understand.
- https://github.com/dmlittle/scenery A Terraform plan output prettifier.
- https://github.com/chrislewisdev/prettyplan A formatting tool to help make large Terraform plans easier to review (https://prettyplan.chrislewisdev.com).
- https://github.com/infracost/infracost Infracost shows hourly and monthly cost estimates for a Terraform project.
- https://github.com/antonbabenko/terraform-cost-estimation Anonymized, secure, and free Terraform cost estimation based on Terraform plan (0.12+) or Terraform state (any version).
- https://github.com/cesar-rodriguez/terrascan Collection of security and best practice test for static code analysis of terraform templates.
- https://github.com/liamg/tfsec Static analysis powered security scanner for your terraform code.
- https://github.com/fugue/regula Regula checks Terraform for AWS security and compliance using Open Policy Agent/Rego.
- https://github.com/bridgecrewio/checkov Static code analysis tool for infrastructure-as-code. It scans cloud infrastructure provisioned using Terraform and detects security and compliance misconfigurations.
- https://github.com/instrumenta/conftest Write tests against structured configuration data using the Open Policy Agent Rego query language.
- https://github.com/rubelw/terraform-validator Validated terraform template for various security violations and rules.
- https://github.com/eerkunt/terraform-compliance a lightweight, security focused, BDD test framework against terraform (https://terraform-compliance.com).
- https://github.com/flosell/iam-policy-json-to-terraform Small tool to convert an IAM Policy in JSON format into a Terraform aws_iam_policy_document (https://flosell.github.io/iam-policy-json-to-ter).
- https://github.com/iann0036/former2 Generate CloudFormation / Terraform / Troposphere templates from your existing AWS resources (https://former2.com).
- https://github.com/dtan4/terraforming Export existing AWS resources to Terraform style (tf, tfstate) (http://terraforming.dtan4.net/).
- https://github.com/GoogleCloudPlatform/terraformer CLI tool to generate terraform files from existing infrastructure (reverse Terraform).
- https://github.com/jmcgill/formation Bulk import of resources into Terraform.
- https://github.com/bridgecrewio/AirIAM Least privilege AWS IAM Terraformer.
- https://github.com/cycloidio/terracognita/ Reads from existing Cloud Providers (reverse Terraform) and generates your infrastructure as code on Terraform configuration.
- https://github.com/iann0036/AWSConsoleRecorder Records actions made in the AWS Management Console and outputs the equivalent CLI/SDK commands and CloudFormation/Terraform templates.
- https://github.com/nozaq/terraform-aws-secure-baseline Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations.
- https://github.com/apparentlymart/terraform-aws-tf-registry Terraform module for creating a simple private Terraform registry in AWS with DynamoDB.
- https://github.com/mineiros-io/terramate Terramate is a tool for managing multiple Terraform stacks with support for change detection and code generation.
- https://github.com/boltops-tools/terraspace Terraspace: The Terraform Framework (https://terraspace.cloud).
- https://github.com/aws-samples/aws-security-services-with-terraform Code examples for the AWS Security Blog post: How to use CI/CD to deploy and configure AWS security services with Terraform.
- https://github.com/ScaleSec/terraform_aws_scp AWS Organizations Service Control Policies (SCPs) written in HashiCorp Terraform.
- https://asecure.cloud/ A free repository of customizable AWS security configurations and best practices.
- https://aws.amazon.com/prescriptive-guidance/ Resources from AWS technology experts and AWS Partners to help accelerate cloud adoption and modernization.
- https://asecure.cloud/ A free repository of customizable AWS security configurations and best practices.
- https://docs.aws.amazon.com/controltower/latest/userguide/guardrails-reference.html Reference for each of the guardrails available in AWS Control Tower.
- https://github.com/toniblyx/my-arsenal-of-aws-security-tools List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
- https://github.com/duo-labs/cloudmapper CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
- https://github.com/toniblyx/prowler AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool.
- https://github.com/airbnb/streamalert StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define (https://streamalert.io).
- https://github.com/cloud-custodian/cloud-custodian Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources (https://cloudcustodian.io).
- https://github.com/flosell/trailscraper A command-line tool to get valuable information out of AWS CloudTrail.
- https://github.com/jonrau1/ElectricEye Continuously monitor your AWS services for configurations that can lead to degradation of confidentiality, integrity or availability. All results will be sent to Security Hub for further aggregation and analysis.
- https://github.com/FSecureLABS/awspx A graph-based tool for visualizing effective access and resource relationships in AWS environments.
- https://github.com/salesforce/cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report with a triage worksheet (https://cloudsplaining.readthedocs.io/).
- https://github.com/nccgroup/PMapper A tool for quickly evaluating IAM permissions in AWS (https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2018/june/principal-mapper-advanced-and-automated-aws-iam-evaluation/?style=Cyber+Security).
- https://github.com/nccgroup/ScoutSuite Multi-Cloud Security Auditing Tool.
- https://github.com/salesforce/policy_sentry IAM Least Privilege Policy Generator (https://policy-sentry.readthedocs.io/).
- https://github.com/duo-labs/parliament AWS IAM linting library.
- https://github.com/SummitRoute/aws_managed_policies Collection of the AWS Managed IAM policies.
- https://github.com/iann0036/iamlive Generate a basic IAM policy from AWS client-side monitoring (CSM).
- https://aws.permissions.cloud/ The aws.permissions.cloud website uses a variety of information gathered within the IAM Dataset and exposes that information in a clean, easy-to-read format.
- https://www.awsiamactions.io/ AWS IAM Actions and Policy Generator
- https://docs.aws.amazon.com/service-authorization/latest/reference/reference.html The Service Authorization Reference provides a list of the actions, resources, and condition keys that are supported by each AWS service. You can specify actions, resources, and condition keys in AWS Identity and Access Management (IAM) policies to manage access to AWS resources.
- https://github.com/benkehoe/aws-sso-util Smooth out the rough edges of AWS SSO (temporarily, until AWS makes it better).
- https://github.com/synfinatic/aws-sso-cli A powerful tool for using AWS SSO for the CLI and web console.
- https://github.com/Versent/saml2aws CLI tool which enables you to login and retrieve AWS temporary credentials using a SAML IDP.
- https://github.com/cevoaustralia/aws-google-auth Provides AWS STS credentials based on Google Apps SAML SSO auth.
- https://github.com/segmentio/aws-okta aws-vault like tool for Okta authentication.
- https://github.com/ruimarinho/gsts Obtain and store AWS STS credentials to interact with Amazon services by authenticating via G Suite SAML.
- https://github.com/99designs/aws-vault A vault for securely storing and accessing AWS credentials in development environments.
- https://github.com/benkehoe/aws-export-credentials Get AWS credentials from a profile to inject into other programs.
- https://github.com/trek10inc/awsume A utility for easily assuming AWS IAM roles from the command line.
- https://github.com/meltwater/awsudo A simple utility for executing cli commands with an assumed role.
- https://github.com/makethunder/awsudo sudo-like utility to manage AWS credentials.
- https://github.com/cloudquery/cloudquery The open-source cloud asset inventory powered by SQL.
- https://github.com/turbot/steampipe Use SQL to instantly query your cloud services (AWS, Azure, GCP and more). Open source CLI. No DB required.
- https://github.com/disneystreaming/ssm-helpers Help manage AWS systems manager with helpers.