Auditing tools

[tate86]

Hey, please check and, if you consider them acceptable, add them.

SQL-like syntax tool Steampipe.io + CIS and CVE audits
https://steampipe.io/docs

CloudQuery: SQL-like syntax tool
https://cloudquery.io/

SG rules dumper
https://gist.github.com/amgill

Another SG dumper
https://github.com/percolate/ec2-security-groups-dumper

SG details (bash)
https://gist.github.com/richadams/384020d6e4e6d4f400d7

SG mapping (AWS inspector like) with PowerShell
https://aseemkblog.wordpress.com/2018/01/08/aws-get-security-group-mapping/

Routing Tables details:
https://raw.githubusercontent.com/CiscoDevNet/csr_aws_guestshell/master/bin/get-route-table.py

ELB analyzer
https://github.com/ozantunca/elb-log-analyzer

AWS Pentesting Lab
https://github.com/juanjoSanz/aws-pentesting-lab

IAM Vulnerability Scanner
https://github.com/lightspin-tech/red-shadow

Chef InSpec CIS rules scanner:
https://github.com/mitre/aws-foundations-cis-baseline

AWS CLI + JQ cheatsheet
https://gist.github.com/lukeplausin/b64c10f8b524bb310e0083756c42caf6

AWless
https://github.com/wallix/awless

AWS CloudDiscovery:
https://github.com/Cloud-Architects/cloudiscovery

Official AWS Labs Golden AMI hardened and Container images following CIS rules and audits using EC2 Image builder:
https://github.com/aws-samples/deploy-cis-level-1-hardened-ami-with-ec2-image-builder-pipeline
https://github.com/aws-samples/build-and-deploy-docker-images-to-aws-using-ec2-image-builder

EC2 Imagebuilder CIS Controls Component:
https://github.com/sufleio/ec2-image-builder/tree/master/cis-benchmarks

AWS Demos for CDK
https://github.com/miztiik/AWS-Demos

Awesome OSS-Alternatives
https://github.com/RunaCapital/awesome-oss-alternatives

Thanks

[toniblyx]

thanks @tate86 I'll give it a look and add those relevant.

[tate86]

A new one appeared:
https://github.com/aquasecurity/trivy

Thanks