ENNAENNA

aws-vault vs CloudFox

GitHub Stats

9.0k
Stars
2.4k
834
Forks
228
0
Issues
7
3mo ago
Updated
6d ago
MIT
License
MIT
Go
Language
Go

About aws-vault

aws-vault stores AWS IAM credentials in your operating system's secure keystore (macOS Keychain, Windows Credential Manager, Linux secret service) and generates temporary credentials via STS when needed. It never writes long-term credentials to disk (~/.aws/credentials), eliminating a common credential theft vector. aws-vault supports MFA prompting, role assumption chains, credential rotation, and session duration configuration. It integrates with any CLI tool that uses AWS environment variables, making it a transparent security layer. For offensive security, it enables safe management of multiple AWS profiles during cloud penetration testing.

About CloudFox

CloudFox is a tool for identifying exploitable attack paths within cloud infrastructures. It enumerates IAM permissions, secrets, and network exposure to uncover potential vulnerabilities in AWS and Azure environments. Written in Go, CloudFox helps security professionals assess the security posture of cloud deployments by revealing misconfigurations and access control weaknesses. The tool is essential for cloud security audits and penetration testing.

Platform Support

🐧linux🍎macos🪟windows
🐧linux🍎macos🪟windows

Tags

Shared

aws

aws-vault only

credential-managementsecurityiamkeystore

CloudFox only

cloud-attack-pathsiam-enumerationazure