Open Source AWS Tools
Production-ready tools for AWS security, authentication, and infrastructure management. Built by practitioners, for practitioners.
Interactive Tools
AWS Security Checklist
360 security checks across 60 AWS services. Select your services, check off items, track progress, and export a professional PDF audit report.
IAM Policy Analyzer
Paste any IAM policy JSON and get instant security analysis. Detects privilege escalation chains, defense evasion, overly permissive wildcards, and 45+ risk patterns with compliance mapping.
Security Score Calculator
Answer 25 questions across 6 security domains to assess your AWS security posture. Get a weighted score from 0 to 100 with prioritized recommendations linking to security cards, playbooks, and glossary terms.
Open Source Tools
iam-to-english
Open-source CLI from KloudSec. Translates AWS IAM policies into plain English, detects privilege escalation (including across statements), diffs policy changes, and gates CI. Runs offline.
cloudstorm
Open-source CLI for distributed load testing across AWS regions. Launches EC2 instances, installs Locust, k6, JMeter or Artillery through Systems Manager, runs the test everywhere, merges the results into one report, and cleans up.
awsmount
Open-source tool from KloudSec that shows an AWS account as a read-only folder. Use ls, cat, grep, find, jq and diff on EC2, VPC, IAM, Lambda and more. Secret-looking values are hidden by default and awsmount only reads.
LocalEmu
A free, open-source AWS emulator. One pip install, one command, and the same CLI, SDK, and Terraform run against 132 services on localhost:4566. No account, no credentials, no internet required.
CognitoApi
Authentication and user management API based on AWS Cognito. Build your applications without thinking about the authentication part.
AWSMap
Fast, comprehensive tool for mapping and inventorying AWS resources across 150+ services and all regions. Scans one account or a whole AWS Organization, stores history in SQLite, and answers SQL and plain-English questions.
IAM Activity Tracker
Comprehensive serverless solution for tracking IAM, STS, and Console signin activities across all regions with real-time security alerting.
EC2 Security Scanner
Production-ready EC2 security scanner with 46 checks across 8 categories and compliance mapping for AWS FSBP, CIS, PCI-DSS, HIPAA, SOC 2, ISO, GDPR, and NIST 800-53.
Lambda Security Scanner
Production-ready Lambda security scanner with 19 checks across 5 categories and compliance mapping for AWS FSBP, CIS, PCI-DSS, HIPAA, SOC 2, ISO, GDPR, and NIST 800-53.
IAM Security Scanner
Production-ready IAM security scanner with 44 checks across 7 categories and compliance mapping for AWS FSBP, CIS, PCI-DSS, HIPAA, SOC 2, ISO, GDPR, and NIST 800-53.
RDS Security Scanner
Production-ready RDS and Aurora security scanner with 53 checks across 7 categories and compliance mapping for AWS FSBP, CIS, PCI-DSS, HIPAA, SOC 2, ISO, GDPR, and NIST 800-53.
ECS/EKS Security Scanner
Production-ready ECS and EKS container security scanner with 45 checks across 8 categories and compliance mapping for AWS FSBP, CIS EKS, PCI-DSS, HIPAA, SOC 2, ISO, GDPR, and NIST 800-53.
Need Custom Solutions?
These tools are just a glimpse of what we build. Contact us for custom AWS security and infrastructure solutions.
Get in Touch