使用 Homebrew 安装 cloudsplaining

项目链接

• 主页
• 仓库
• 上游文档
• 软件包管理器页面

命令和别名

• cloudsplaining

项目历史

The project was created as a companion to Salesforce's Policy Sentry work: the README explains that Policy Sentry made least-privilege policy creation easier, but existing AWS accounts still had large backlogs of broad IAM policies that needed assessment.

Cloudsplaining's public release stream began in 2020, with the GitHub releases page marking version 0.0.2 as the open source release. The tool's core model has remained a CLI workflow that downloads AWS IAM account authorization details, scans them, and emits HTML plus JSON results.

采用历史

The upstream README documents installation through pip and Homebrew, including Salesforce's Homebrew tap, making it easy to put the scanner into Unix security and cloud-audit workflows.

Its adoption niche is AWS security engineering, penetration testing, and compliance review: it focuses on practical IAM risks such as data exfiltration, infrastructure modification, resource exposure, privilege escalation, and credentials exposure.

使用方式

Typical use starts with configured AWS credentials, `cloudsplaining download` to collect account authorization details, `cloudsplaining create-exclusions-file` to generate `exclusions.yml`, and `cloudsplaining scan` to generate reports.

The CLI can also scan a single IAM policy file, which makes it useful both for full-account audits and for reviewing individual policy documents during development.

为什么软件包爱好者会关心

Cloudsplaining is a good example of a cloud-security Python tool packaged for both pip and Homebrew: it turns a cloud API audit into a repeatable shell command that can live in developer laptops, CI jobs, and consulting toolkits.

时间线

• 2020: Version 0.0.2 was published as the open source release on GitHub.
• 2020: Early releases added HTML report improvements, recursive scanning, trust-policy reporting, and automated Homebrew updates.
• 2020: The README documented both pip and Homebrew installation paths.

Related projects

• Policy Sentry is the closest related Salesforce project and is cited in the README as the motivation for Cloudsplaining.
• Cloudsplaining also intersects with AWS IAM, AWS SecurityAudit-style permissions, and IAM privilege-escalation research such as Pathfinding.cloud.

来源

• https://github.com/salesforce/cloudsplaining#readme
• https://cloudsplaining.readthedocs.io/en/latest/
• https://github.com/salesforce/cloudsplaining/releases