CloudMisScan
Find misconfigurations hiding in your AWS infrastructure.
Overview
An AWS configuration scanner that brings resource checks, findings, and security recommendations into one place.
What it does
- Scan S3 buckets, IAM policies, security groups, and network configuration.
- Review findings and security recommendations in a web interface.
- Use authenticated API endpoints for scans, reports, and monitoring.
The problem
Cloud configuration is spread across many services. A bucket policy, an IAM permission, or an exposed security group can be easy to miss when each resource is inspected separately.
Inside the project
The Python backend uses FastAPI, SQLAlchemy, and Boto3 to work with AWS resources. The interface uses Next.js and TypeScript. The public repository includes authentication, scanning, reporting, and monitoring endpoints.
Explore the implementation
The source repository contains the resource checks, API implementation, and setup instructions for running the scanner.
Go deeper in the source.
Code, setup, and project documentation.