Cloud Security Audit Toolkit v1.0.0

Cloud Security Audit Toolkit v1.0.0

The first stable release of the Cloud Security Audit Toolkit is now available.

This Python-based security automation project audits structured cloud configuration data, detects common misconfigurations, calculates a security posture score, and generates actionable remediation reports.

Key Features

• IAM security checks
• Public storage exposure detection
• Network security-group analysis
• Encryption validation
• Logging and monitoring checks
• Severity-based risk scoring
• Security posture score from 0 to 100
• JSON, CSV, Markdown, and HTML reports
• Secure and vulnerable sample environments
• Automated tests across Python 3.10, 3.11, and 3.12
• GitHub Actions continuous integration
• Compliance references and remediation guidance
• No live cloud credentials required

Security Checks

• Missing MFA
• Old and excessive access keys
• Direct administrator access
• Public storage buckets
• Missing storage encryption
• Disabled versioning and access logging
• Public SSH, RDP, and database ports
• Unrestricted network access
• Missing encryption at rest
• Unencrypted snapshots
• Disabled audit logging
• Missing log validation
• Disabled security alerts
• Insufficient log retention

Reports

The toolkit generates:

• JSON
• CSV
• Markdown
• Standalone HTML

Important Notice

This project is intended for defensive security, authorised auditing, education, security research, and portfolio demonstration.

It does not provide formal compliance certification and should not replace a complete professional cloud-security assessment.