Cloud security

CloudMisScan

Find misconfigurations hiding in your AWS infrastructure.

Personal projectView source

Overview

An AWS configuration scanner that brings resource checks, findings, and security recommendations into one place.

PythonFastAPIAWSSQLAlchemyNext.js

What it does

  • Scan S3 buckets, IAM policies, security groups, and network configuration.
  • Review findings and security recommendations in a web interface.
  • Use authenticated API endpoints for scans, reports, and monitoring.

The problem

Cloud configuration is spread across many services. A bucket policy, an IAM permission, or an exposed security group can be easy to miss when each resource is inspected separately.

Inside the project

The Python backend uses FastAPI, SQLAlchemy, and Boto3 to work with AWS resources. The interface uses Next.js and TypeScript. The public repository includes authentication, scanning, reporting, and monitoring endpoints.

Explore the implementation

The source repository contains the resource checks, API implementation, and setup instructions for running the scanner.

Go deeper in the source.

Code, setup, and project documentation.

Open GitHub