Cloud Security Audit Toolkit v1.0.0
The first stable release of the Cloud Security Audit Toolkit is now available.
This Python-based security automation project audits structured cloud configuration data, detects common misconfigurations, calculates a security posture score, and generates actionable remediation reports.
Key Features
- IAM security checks
- Public storage exposure detection
- Network security-group analysis
- Encryption validation
- Logging and monitoring checks
- Severity-based risk scoring
- Security posture score from 0 to 100
- JSON, CSV, Markdown, and HTML reports
- Secure and vulnerable sample environments
- Automated tests across Python 3.10, 3.11, and 3.12
- GitHub Actions continuous integration
- Compliance references and remediation guidance
- No live cloud credentials required
Security Checks
- Missing MFA
- Old and excessive access keys
- Direct administrator access
- Public storage buckets
- Missing storage encryption
- Disabled versioning and access logging
- Public SSH, RDP, and database ports
- Unrestricted network access
- Missing encryption at rest
- Unencrypted snapshots
- Disabled audit logging
- Missing log validation
- Disabled security alerts
- Insufficient log retention
Reports
The toolkit generates:
- JSON
- CSV
- Markdown
- Standalone HTML
Important Notice
This project is intended for defensive security, authorised auditing, education, security research, and portfolio demonstration.
It does not provide formal compliance certification and should not replace a complete professional cloud-security assessment.