# ReversecLabs/awspx

A graph-based tool for visualizing effective access and resource relationships in AWS environments.

Repository: https://github.com/ReversecLabs/awspx
Canonical: https://ross.abutalabs.com/products/awspx
Language: Python
License: GPL-3.0
License Family: copyleft
Topics: aws, aws-security, graph-theory, pentesting
Last push: 2022-10-04T10:27:47+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 2464, "days_push": 1429, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1018, forks 108 (observed 2026-08-28T04:03:14.796103+00:00)

## What it is
awspx is a graph-based security tool that visualizes effective access and resource relationships in AWS environments. It resolves IAM policy information to determine which actions affect which resources and identifies how permissions combine into attack paths, exposed via a web interface.

## Use cases
- visualize effective access and resource relationships in an AWS account
- find privilege escalation attack paths in AWS IAM
- audit AWS IAM policies as a graph
- map which principals can access which AWS resources
- pentest an AWS environment with valid credentials
- explore AWS security posture in a BloodHound-like web UI

## When to choose
- you have valid AWS credentials and want to analyze effective permissions and attack paths
- you need a graph view of IAM relationships rather than raw policy JSON
- you are doing authorized AWS security assessment or red teaming

## When to avoid
- you have no AWS permissions - awspx requires credentials to function
- you need actively maintained tooling - the latest release dates to 2022
- you want a multi-cloud or Azure/GCP equivalent tool

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: security, data-visualization, web-scraping, cli
- domain: security, cloud-computing, penetration-testing, developer-tools
- platform: python, cli
- tags: aws, graph-database, attack-paths, iam, bloodhound-style, pentesting, linux, macos, docker

## Member repositories
- ReversecLabs/awspx (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:14.796103+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:09:26.652798+00:00, confidence not recorded.
  - readme: https://github.com/ReversecLabs/awspx (fetched 2026-08-28T04:03:14.796103+00:00, sha f4807ea764bc)
- Data as of 2026-08-30T08:39:29.467469+00:00.