Show HN: Frontdoor: find who can assume into your cloud accounts

Category: security

Tags: cloud-security, aws, iam, federation, security-scanner

Score: 7.3/10 (Innovation: 7, Technical: 7, Documentation: 8, Utility: 7)

Frontdoor is a read-only cloud security scanner that maps inbound federated trust into AWS, GCP, and Azure accounts, focusing on OIDC/SAML/cross-account trust policies that other scanners overlook. It detects open trust conditions, evaluates how far an external identity can reach, and uniquely correlates cross-cloud chains spanning AWS to GCP.

Target audience: devops, security engineers, cloud architects

Repository: https://github.com/secorvia/frontdoor · Go · Apache-2.0 · 3 stars

View on Hacker News