{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/2"},{"label":"Systems Administration","url":"https://skillfed.io/packages/category/system-systems-administration"}],"enrichment":{"capability":"Audits AWS cloud security posture by checking IAM, network, storage, and compliance configurations using native boto3 clients, producing prioritized findings with MITRE ATT&CK mappings and compliance framework evidence.","skillfed_tags":["aws-security","compliance-automation","ci-cd-security"],"use_cases":["Run daily scheduled security audits in GitHub Actions or GitLab CI to detect IAM and network misconfigurations before they reach production.","Embed compliance checks in infrastructure-as-code pipelines to fail deployments when critical security controls are missing.","Generate audit-ready compliance evidence reports for SOC2, HIPAA, or PCI-DSS assessments without manual data collection.","Audit cross-account AWS environments by assuming a read-only security audit role in target accounts.","Identify and remediate long-lived IAM access keys, root account risks, and overly permissive S3 bucket policies in existing accounts."],"what_it_does":"cloudsec-audit is a Python library that runs continuous security audits on AWS accounts by querying IAM, network, storage, and logging configurations through boto3. It detects common misconfigurations\u2014such as root account without MFA, overly permissive security groups, public S3 buckets, and long-lived access keys\u2014and returns findings with severity levels, remediation steps, and MITRE ATT&CK technique mappings.\n\nThe package is designed for developers and operators who want to embed security checks directly into CI/CD pipelines or run them on-demand without relying on expensive SaaS CSPM platforms. It provides both a Python API for programmatic use and a CLI for one-off audits, supports multi-region scanning and cross-account auditing via role assumption, and can generate compliance evidence reports mapped to CIS, SOC2, HIPAA, PCI-DSS, and ISO 27001 frameworks.","worth_installing":"Yes. The package solves a real problem\u2014continuous, scriptable cloud security auditing without SaaS cost\u2014with low install friction, permissive licensing, and active maintenance. It is production-ready for teams seeking to embed security checks in CI/CD or run on-demand audits. Early release status and lack of external security audit are minor considerations for risk-sensitive environments, but the codebase is straightforward and the findings schema is well-documented."},"id":"cloudsec-audit","links":{"html":"https://skillfed.io/packages/cloudsec-audit","md":"https://skillfed.io/packages/cloudsec-audit.md","pypi":"https://pypi.org/project/cloudsec-audit/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-04-19","license_spdx":null,"license_treatment":"permissive","name":"cloudsec-audit","python_support":"supports_current","summary":"Continuous cloud security posture auditing for AWS, GCP, and Azure"},"popularity":{"monthly_downloads":312908,"position":7722,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.0.0"}