cloudsec-audit

What it is and what it does

cloudsec-audit is a Python library that runs continuous security audits on AWS accounts by querying IAM, network, storage, and logging configurations through boto3. It detects common misconfigurations—such as root account without MFA, overly permissive security groups, public S3 buckets, and long-lived access keys—and returns findings with severity levels, remediation steps, and MITRE ATT&CK technique mappings.

The package is designed for developers and operators who want to embed security checks directly into CI/CD pipelines or run them on-demand without relying on expensive SaaS CSPM platforms. It provides both a Python API for programmatic use and a CLI for one-off audits, supports multi-region scanning and cross-account auditing via role assumption, and can generate compliance evidence reports mapped to CIS, SOC2, HIPAA, PCI-DSS, and ISO 27001 frameworks.

Use it for:

• Run daily scheduled security audits in GitHub Actions or GitLab CI to detect IAM and network misconfigurations before they reach production.
• Embed compliance checks in infrastructure-as-code pipelines to fail deployments when critical security controls are missing.
• Generate audit-ready compliance evidence reports for SOC2, HIPAA, or PCI-DSS assessments without manual data collection.
• Audit cross-account AWS environments by assuming a read-only security audit role in target accounts.
• Identify and remediate long-lived IAM access keys, root account risks, and overly permissive S3 bucket policies in existing accounts.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Audits AWS cloud security posture by checking IAM, network, storage, and compliance configurations using native boto3 clients, producing prioritized findings with MITRE ATT&CK mappings and compliance framework evidence.

Yes. The package solves a real problem—continuous, scriptable cloud security auditing without SaaS cost—with low install friction, permissive licensing, and active maintenance. It is production-ready for teams seeking to embed security checks in CI/CD or run on-demand audits. Early release status and lack of external security audit are minor considerations for risk-sensitive environments, but the codebase is straightforward and the findings schema is well-documented.

Install

cloudsec-audit on PyPI

pip install cloudsec-audit

uv add cloudsec-audit

poetry add cloudsec-audit

Installing cloudsec-audit

Before you install

Low friction: pure Python wheel with only boto3 and botocore as runtime dependencies. Active maintenance as of 2026-04-19 with current Python support (3.9–3.12). Early-stage project (first release 2026-04-19) with no known vulnerabilities.

License in practice

MIT license permits commercial and private use with minimal restrictions. You may use, modify, and distribute the package freely provided you retain the license notice.

Quickstart

pip install cloudsec-audit

from cloudsec_audit import CloudSecAudit, AWSSession

audit = CloudSecAudit(
    session=AWSSession(),
    regions=["us-east-1"],
)
report = audit.run()
print(report.summary())

Requires AWS credentials available to boto3 (environment variables, ~/.aws/credentials file, or EC2/ECS instance profile). Python 3.9 or later.

Verify before relying

• Whether the package's compliance framework mappings (CIS, SOC2, HIPAA, PCI-DSS, ISO 27001) are current and audited by security professionals.
• Performance and API call volume when auditing large AWS accounts with many resources across multiple regions.
• Whether cross-account auditing via role assumption is production-tested and documented for security best practices.

Package facts

Evidence: cloudsec_audit-1.0.0-py3-none-any.whl

Keywords: aws, security, cspm, cloud, iam, posture, compliance

Tags

More Security packages