iam

The most comprehensive authentication framework

Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

A curated list of awesome Amazon Web Services (AWS) libraries, open source repos, guides, blogs, and other resources. Featuring the Fiery Meter of AWSome.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Modern authentication, on your terms. Open source alternative to Auth0, Clerk, WorkOS, Stytch.

A vault for securely storing and accessing AWS credentials in development environments

8 Lessons, Kick-start Your Cybersecurity Learning.

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

Kanidm: A simple, secure, and fast identity management platform

Pomerium is an identity and context-aware access proxy.

企业级的 Go 语言实战项目：认证和授权系统（带配套课程）

Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy

A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster

👤 Identity and Access Management knowledge for cloud platforms

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

IAM Least Privilege Policy Generator

Dromara MaxKey 🗝️ SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。

The easiest way to access AWS.

A tool for quickly evaluating IAM permissions in AWS.

Infra provides authentication and access management to servers and Kubernetes clusters.

A collection of bash shell scripts for automating various tasks with Amazon Web Services using the AWS CLI and jq.

A GitHub Action for authenticating to Google Cloud.

Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.

以开源为核心的IDaas/IAM平台，用于管理企业内员工账号、权限、身份认证、应用访问，帮助整合部署在本地或云端的内部办公系统、业务系统及三方 SaaS 系统的所有身份，实现一个账号打通所有应用的服务。

Terraform module to create AWS IAM resources 🇺🇦

A command-line tool to get valuable information out of AWS CloudTrail

Least privilege AWS IAM Terraformer

Small tool to convert an IAM Policy in JSON format into a Terraform aws_iam_policy_document