salesforce/cloudsplaining

Health v2 · maintenance only

Adoption not part of the score

2244 stars · 221 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Cloudsplaining is an AWS IAM security assessment tool that identifies violations of least privilege in IAM policies. It generates a risk-prioritized HTML report covering data exfiltration, privilege escalation, resource exposure, and credentials exposure risks.

Use cases

• audit AWS IAM policies for least privilege violations
• find over-permissive IAM roles in my AWS account
• generate a report of IAM privilege escalation risks
• scan IAM policy JSON files for security issues
• identify IAM roles assumable by AWS compute services
• prioritize IAM policy remediation across multiple AWS accounts

When to choose

• you need automated least-privilege analysis of AWS IAM policies
• you want a risk-prioritized HTML report for remediation planning
• you need to audit IAM across one or many AWS accounts or single policy files

When to avoid

• you need multi-cloud IAM analysis beyond AWS
• you need real-time IAM enforcement rather than point-in-time assessment
• you need runtime permission boundary detection rather than static policy analysis

Facets

cli-tool · maturity active

security vulnerability-scanning cli developer-tools security cloud-computing developer-tools python cli cross-platform aws-iam least-privilege cloud-security policy-analysis risk-assessment devops

Member repositories

For agents

markdown · JSON · MCP: product_card(name="salesforce/cloudsplaining")