An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy

Rapid7 | insightCloudSec | Kubernetes RBAC Power Toys - Visualize, Analyze, Generate & Query

Create a break glass role for emergency use in order to limit AWS production account access. Configure automatic alerts and logging of activities in the role to secure its use in production environments.

Repository for iamfast questions and issues

🔐 Lightning fast, global scale authorization service without the overhead of a yet another DSL.

Validate all your Customer IAM Policies against AWS Access Analyzer - Policy Validation

Lambda Extension for iamlive

Cloud governance reports from native services in a clear and readable digest

TOTP MFA for teams: Shamir's Secret Sharing and zero trust OTP generation

Catalog and understand risks from granting IAM privileges

command line interface for Permify

📚 ☁️ For Architects and Engineers ☁️ 📚

This project shows a complete use case with the least privilege principle on Google Cloud using modular Terraform, Terragrunt and Cloud Build

A comprehensive collection of AWS Security projects covering Identity & Access Management (IAM), Compute Security (EC2), and Network Security. Perfect for AWS practitioners and Cybersecurity learners

Enterprise PowerShell module for comprehensive Active Directory security auditing. Features 9 security modules, Microsoft compliance coverage, CI/CD integration, SQLite database, and comprehensive reporting. Perfect for security teams and M&A due diligence.

Organizational Cognitive Telemetry (OCT) — a system for capturing sanitized AI interaction telemetry to identify cognitive friction, knowledge gaps, and usage patterns across an organization, without storing sensitive content or individual identities.

gcloud script to provision my GKE cluster, in a secure way

Custom IAM users, groups, roles, and least privilege access policies. Includes EC2 instance with attached IAM role and documented testing.

CIEM (Cloud Infrastructure Entitlement Management) platform for Zero Trust IAM - Excessive permissions detection, least-privilege scoring, and entitlement risk analysis