cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool designed to identify least privilege violations in IAM policies and generate risk-prioritized HTML reports. Its primary use case is to evaluate IAM configurations across one or multiple AWS accounts, highlighting risks such as data exfiltration, infrastructure modification, resource exposure, and privilege escalation. Notable features include the identification of IAM Roles that can be assumed by AWS Compute Services and the capability to utilize custom exclusions to manage false positives.