Cloud Security blogs, podcasts, standards, projects, and examples.

• Public Cloud Governance
  • AWS Governance
• Containers
  • Docker Images
  • Kubernetes Operators
  • Container Tools
• Cloud Security Standards
• Learning
  • Blogs
  • Courses
  • Labs
  • Podcasts
• Certifications
• Projects
  • Alerting
  • Benchmarking
  • Data Loss Prevention
  • Identity and Access Mangement
  • Incident Response
  • Spring
• Examples
  • Automated Security Assessment
  • Identity and Access Mangement
  • Logging
• Misc
  • Other Awesome Lists
• Contribute
• License

• AWS CodePipeline Governance
• AWS Config Rules Development Kit
• AWS Control Tower Customizations
• AWS Security Hub Automated Response and Remediation
• AWS Well Architected Labs

• Aqua
  • Aqua Security Operator
  • Starboard Operator
• Anchore - Anchore Engine Operator
• Falco Security - Falco Operator
• Quay - Project Quay Container Security
• Snyk - Snyk Operator
• Splunk - Splunk Operator for Kubernetes
• Sysdig - Sysdig Agent Operator

• Anchore
  • Anchore Engine
  • Grype
  • Kai
  • Syft
• Aqua
  • Cloudsploit
  • Kube-Bench
  • Kube-Hunter
  • Kubectl-who-can
  • Trivy
• Docker - Docker Bench for Security
• Elias - Dagda
• Falco Security - Falco
• Harbor - Harbor
• Quay - Clair
• Snyk - Snyk
• vchinnipilli - Kubestriker

• ISO/IEC 27017:2015
• MTCS SS 584
• CCM
• NIST 800-53

• AWS Security

• Oracle Cloud Security Administrator

• PagerDuty Security Training

• Cloud Vendors
  • AWS Certified Security Specialty
  • Azure Security Engineer Associate
  • Google Professional Cloud Security Engineer
  • Oracle Cloud Platform Identity and Security Management
• ISC² - International Information System Security Certification Consortium
  • CCSP - Certified Cloud Security Professional
• CSA - Cloud Security Alliance
  • CCSK - Certificate of Cloud Security Knowledge
  • CCAK - Certificate of Cloud Auditing Knowledge

• 411 by Etsy
• ElastAlert by Yelp
• StreamAlert by Airbnb

• AWS Security Benchmark

• Git Secrets by AWS Labs

• Awesome Lists
  • Awesome IAM List
• AWS Labs
  • AWS IAM Generator
• Duo Labs
  • Parliament
  • CloudTracker
• Netflix
  • Aardvark
  • ConsoleMe
  • Repokid
• Salesforce
  • Policy Sentry
  • CloudSplaining
  • AWS-AllowLister
  • Terraform for Policy Guru
• Kubernetes AWS IAM Authenticator by Kubernetes SIG
• AWS Missing Tools by CloudAvail
• Enumerate IAM by Andres Riancho

• AWS
  • AWS Incident Response Playbooks by AWS Samples
  • AWS Security Hub Automated Response and Remediation
• Netflix
  • Dispatch by Netflix
• PagerDuty
  • PagerDuty Automated Remediation Docs
  • PagerDuty Business Response Docs
  • PagerDuty DevSecOps Docs
  • PagerDuty Full Case Ownership Docs
  • PagerDuty Full Service Ownership Docs
  • PagerDuty Going OnCall Docs
  • PagerDuty Incident Response Docs
  • PagerDuty Operational Review Docs
  • PagerDuty PostMortem Docs
  • PagerDuty Retrospectives Docs
  • PagerDuty Stakeholder Communication Docs

• Spring Cloud Security

• AWS Config Rules Repository
• AWS Inspector Agent Autodeploy
• AWS Inspector Auto Remediation
• AWS Inspector Lambda Finding Processor

• Amazon Cognito Streams connector for Amazon Redshift

• AWS Centralized Logging
• AWS Config Snapshots to ElasticSearch
• AWS CloudWatch Events Monitor Security Groups

• AWS WAF Sample
• AWS WAF Security Automations

• Awesome Cloud Native Security
• Awesome Cloud Security
• Awesome IAM List
• Awesome Incident Response List
• Awesome Shodan Queries

Contributions welcome! Read the contribution guidelines first.

To the extent possible under law, Jacob Silva has waived all copyright and related or neighboring rights to this work.