dAWShund

Acerca de

This tool provides a comprehensive solution for cloud security engineers to understand and manage AWS Identity and Access Management (IAM) risk. It orchestrates the dAWShund project's components to enumerate IAM policies, simulate effective permissions, and summarize access relationships. Designed to integrate seamlessly with AI assistants like Claude Desktop via its Model Context Protocol (MCP) server, it offers fast, easy, and effective insights into complex AWS identity structures, helping identify over-privileged principals and unexpected access.

Características Principales

• Summarized analysis of allowed, explicit, and implicit denied actions per principal.
• Automated AWS IAM and resource policy enumeration across specified regions.
• Effective permissions simulation using the AWS `simulate-principal-policy` API.
• Model Context Protocol (MCP) server for seamless integration with AI assistants like Claude Desktop.
• 0 GitHub stars
• Optional Neo4j graph visualization for deep analysis of access relationships.

Casos de Uso

• Auditing AWS IAM configurations and resource policies for security engineers.
• Identifying over-privileged principals and detecting potential misconfigurations in AWS environments.
• Integrating AWS identity and access analysis with AI assistants for natural language-driven insights.