Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy

A consolidated series of structured data for cloud identity and access management systems, including datasets for AWS, Azure, and Google Cloud

A python application that leverages Microsoft Azure to build a fully functional trading system.

Access AKS clusters using Azure Workload Identity Federation

This repository documents changes to Azure RBAC roles, by periodically fetching the definitions of the roles using Get-AzRoleDefinition and committing the results to this repository.

An Azure DevOps extension to simplify use of Sheriff, a command line tool to manage Microsoft Entra Privileged Identity Management (Microsoft Entra PIM) using desired state configuration.

Complete Terraform infrastructure for AKS with workload identity, Azure AD integration, and comprehensive security configuration

Production-style Azure Administration and Cloud Security Projec

A writeup about how traffic filtering can be solved in a modern way with Azure attribute-based access control (Azure ABAC)

Hands-on Azure Administrator labs for AZ-104, covering governance, RBAC, storage, compute, networking, monitoring and backup.

Offline web tool to visualize Azure RBAC role assignments across subscriptions, resource groups, and resources with a read-only account. Bilingual (ZH/EN), light/dark, multiple view modes. / 以唯讀帳號離線總覽 Azure RBAC 權限分配的網頁工具

A reference implementation for detecting and safely removing orphaned Azure RBAC role assignments across subscriptions and management groups using Azure DevOps pipelines.

IaC stack for Aquilosaurios using Terraform on Azure. Provisions cloud architecture including ACR, virtual networks, identity settings, and other resources. Delivers secure, scalable, automated environments for the game, built for the Software Architecture (ARSW) course of the Escuela Colombiana de Ingeniería Julio Garavito.

PRIMA - Privileged Role Identity Management Agent

Reusable Terraform / OpenTofu module and progressive examples for Azure RBAC — from simple role assignments to production-grade identity and access patterns across Azure resources.

Production-style Azure Enterprise Landing Zone deployed and managed with Terraform featuring networking, RBAC, monitoring, backup, recovery, governance, and cost management.

Example migrating Azure Key Vault from Policy to RBAC authorisation

Entra ID NHI governance lab - discovered, risk-scored, and remediated 12 misconfigured service principals and managed identities across a fictional fintech tenant (Vantex).

Reusable Terraform / OpenTofu module and progressive examples for Azure Container Registry (ACR) — from simple registry deployments to production-grade integration patterns with AKS, RBAC, and private networking.

Reusable Azure Terraform module library using HCP Terraform, GitHub Actions OIDC, HashiCorp Vault, and dynamic Azure credentials.