pf-05-multicloud-asset-audit-automation
A Python tool that collects assets, permissions, and audit logs from AWS, GCP, and Tencent Cloud into one schema, and alerts on risky events.
- Python
- boto3
- Google Cloud SDK
- Tencent Cloud SDK
- Google Sheets
- Slack
- Telegram
- 3
- Clouds covered by the public code
- 7
- Collectors by resource type
- 49
- Audit actions tracked (16 alert immediately)
Approach
Each account is reached through a cross-account role such as STS AssumeRole. Seven collectors, one per resource type, feed a single data class per resource. Output goes to Google Sheets and CSV, and 16 critical events alert Slack and Telegram immediately based on critical_events.yaml.
View on GitHub ↗
Open the case: case-studies/multi-csp-asset-automation/README.md →