Ian Mckay

cel-js. A lightweight, zero-dependency implementation of the Common Expression Language (CEL) in JavaScript.

langflow. Langflow is a powerful tool for building and deploying AI-powered agents and workflows.

aws-advanced-go-wrapper. The AWS Advanced Go Wrapper is complementary to existing Go drivers and aims to extend the functionality of the driver to enable applications to take full advantage of the features of clustered databases such as Amazon Aurora.

apigw-vtl-emulator. A browser-based editor and emulator for AWS API Gateway VTL templates — with live preview, debug tools, and full in-browser execution.

wails. Create beautiful applications using Go

tree-sitter. An incremental parsing system for programming tools

hackingthe.cloud. An encyclopedia for offensive and defensive security knowledge in cloud native technologies.

go-native-netcdf. A native Go implementation of NetCDF4.

gcp-iam-brute. Python

diagrams-aws-icons. diagrams.net shape libraries with AWS Architecture Icons

grammars-v4. Grammars written for ANTLR v4; expectation that the grammars are free of actions.

cedar-go. Go implementation of the cedar policy engine

sysl. Sysl (pronounced "sizzle") is a system specification language

antlr4. ANTLR (ANother Tool for Language Recognition) is a powerful parser generator for reading, processing, executing, or translating structured text or binary files.

eventcatalog. The discovery and governance layer for event-driven systems. Document your domains, services, events and schemas — for your teams and your AI agents.

cnappgoat. CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.

cedar. Implementation of the Cedar Policy Language

freedata. A silly project for free (maybe) egress from EC2 instances using Tailscale and Session Manager

breaches.cloud. https://breaches.cloud

go-string. Useful Go String methods

awesome-cedar. Awesome List for AWS' Cedar Policy Engine and Language

cedar. A Go binding for Amazon Cedar Policy using wasm to embed the Cedar engine with near zero overhead.

ec2-former2. Generate IaC scripts from existing AWS resources with temporary security credentials

awsaccountcreds. Go

distilled. Effect-native SDKs for cloud providers

cfn-language-discussion. Language discussions for CloudFormation template language

hey. HTTP load generator, ApacheBench (ab) replacement

access-undenied-aws. Access Undenied parses AWS AccessDenied CloudTrail events, explains the reasons for them, and offers actionable remediation steps. Open-sourced by Ermetic.

cfn-guard-wrapper. cfn-guard-wrapper

aws-cloudsaga. AWS CloudSaga - Simulate security events in AWS

SneakyEndpoints. Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints

cfngine. An implementation of CloudFormation templates

flowdog. Framework for inspecting and editing traffic in AWS VPCs

IAMTrail. IAMTrail

ipv6-ghost-ship. Silly usage of AWS EC2 IPv6 prefixes

csp_security_mistakes. This repo has been replaced by https://www.cloudvulndb.org

amazon-linux-2023. Amazon Linux 2023

CureIAM. Clean accounts over permissions in GCP infra at scale

cloudkey. No need for IAM users when we have Yubikeys

aws-northstar. NorthStar is an open source design system with reusable React components for rapidly prototyping intuitive, meaningful and accessible user experience. It simplifies your work and ensures consistent, predictable user experience at scale for your customers. With NorthStar, you can focus on innovation and do more with less.

aws-fargate-fast-autoscaler. AWS Fargate Fast Autosaler - A Serverless Implementation that Triggers your Fargate Autoscaling in Seconds

trackiam. A project to collate IAM actions, AWS APIs and managed policies from various public sources.

dynamosize. AWS DynamoDB table sizes aren't reported to CloudWatch. This fixes that.

efsu. efsu is for accessing AWS EFS from your machine without a VPN

iamzero. Identity & Access Management simplified and secure.

cfrepo. Python

mikrotik-dhcp-leases-menubar. A menubar to see recent DHCP leases from a mikrotik on macos

dino. PyTorch code for Vision Transformers training with the Self-Supervised learning method DINO

reverse-interview. Questions to ask the company during your interview

OpenSearch. 🔎 Open source distributed and RESTful search engine.

projen. Rapidly build modern applications with advanced configuration management

my-arsenal-of-aws-security-tools. List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

stepfn.dev. TypeScript

actions2aws. Assume AWS IAM roles from GitHub Actions workflows with no stored secrets

macdriver. Native Mac APIs for Go

go-release-action. Automatically publish Go binaries to Github Release Assets through Github Action.

aws-allowlister. Automatically compile an AWS Service Control Policy that ONLY allows AWS services that are compliant with your preferred compliance frameworks.

serverlessish. Run the same Docker images in AWS Lambda and AWS ECS

mavm. Create new AWS accounts and Organizations on the fly and cleanup and close accounts afterwarts again. Fully automated.

ingraph. InGraph is a declarative infrastructure graph DSL for AWS CloudFormation.

shield-advanced. Scripts and Lambdas to help with automated deployment of AWS Shield Advanced

aws-secure-environment-accelerator. ASEA developer support has ended, and the ASEA github repo will be marked Archived (read-only) by the end of 2025.

aws-cloudformation-template-formatter. cfn-format is a command line tool and Go library that pretty-prints CloudFormation, adhering to the standards used in AWS documentation.

diagram-maker. A library to display an interactive editor for any graph-like data.

aws-cdi-sdk. AWS Cloud Digital Interface (CDI) SDK. Documentation at: https://aws.github.io/aws-cdi-sdk/mainline/index.html

bicep. Bicep is a declarative language for describing and deploying Azure resources

arn-info. Arn parser

yaml. YAML parser and serialiser for JavaScript

yaml-parser. # yaml-parser

arn. A Python library for parsing AWS ARNs.

superwerker. superwerker can help you get started with the AWS Cloud quickly without investing in consultants or devoting time to extensive research. superwerker is a free, open-source solution that lets you quickly set up an AWS Cloud environment following best practices for security and efficiency so you can focus on your core business.

dce-cli. Disposable Cloud Environment CLI

nlp.js. An NLP library for building bots, with entity extraction, sentiment analysis, automatic language identify, and so more

parliament. AWS IAM linting library

mediocre-cloud9. A collection of roughly average Cloud9 IDE tips and tricks

aws_exposable_resources. Resource types that can be publicly exposed on AWS

pacu. The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

aws-incident-response. HCL

chaos-ssm-documents. Collection of AWS SSM Documents to perform Chaos Engineering experiments

terraform-cdk. Define infrastructure resources using programming constructs and provision them using HashiCorp Terraform

cloud9-somewhat-local. Python

Redboto. Red Team Scripts for AWS.

aws-iam-permissions-guardrails. AWS IAM Permissions Guardrails https://aws-samples.github.io/aws-iam-permissions-guardrails/

pngtomaskedjpegsvg. Convert alpha PNGs to SVG with embedded JPEG

selfie2anime. Anime2Selfie Backend Services - Lambda, Queue, API Gateway and traffic processing

cloudformation-guard. Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0

awsssmchaosrunner. Amazon's light-weight library for chaos engineering on AWS. It can be used for EC2 and ECS (with EC2 launch type).

Docker-OSX. Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

event-engine-cloud9.

cloudformation-aws-landing-zone. AWS Landing Zone Template v2.4.6(Latest)

cirrus. A CLI deployment tool for CloudFormation templates

cfn-diagram. CLI tool to visualise CloudFormation/SAM/CDK stacks as visjs networks, draw.io or ascii-art diagrams.

cloud-security-remediation-guides. Security Remediation Guides

vscode-drawio. This unofficial extension integrates Draw.io (also known as diagrams.net) into VS Code.

aws-export-credentials. Get AWS credentials from a profile to inject into other programs

mxgraph. mxGraph is a fully client side JavaScript diagramming library

aws-sso-util. Smooth out the rough edges of AWS SSO (temporarily, until AWS makes it better).

cloudsplaining. Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

golden-gate. Framework to connect wearables and other IoT devices to mobile phones, tablets and PCs with an IP-based protocol stack over Bluetooth Low Energy

cloud. cloud region / instance type data