Cloud-Security-Scanner - Cloud Security Scanner is a tool that automaticall

项目说明

🛡️ AI Cloud Security Scanner

![FastAPI]()
![React]()
![Vite]()
![Python]()
![Docker]()
![Supabase]()

An intelligent, next-generation Cloud Security Posture Management (CSPM) and automated assessment platform. AI Cloud Security Scanner audits multi-cloud en (AWS, Azure, GCP), identifies misconfigurations and security risks, and le AI for automated remediation recommendations and compliance enforcement.

---

📑 Table of Contents

Key Features

System Architecture

Tech Stack

Repository Structure

Getting Started

- Prerequisites
- Quick Start (Windows)
- Manual Setup
- Docker Compose

Configuration & En

API Documentation

Compliance Standards

License

---

✨ Key Features

🌐 Multi-Cloud Security Auditing: Real-time inspection across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP).

🤖 AI-Dri: Uses OpenAI to generate intelligent, context-aware remediation scripts and one-click auto-fixes for misconfigured cloud resources.

📊 Interacti Dashboard:

- Li Score & dynamic posture trend analytics powered by Recharts.
- Se breakdown (Critical, High, Medium, Low) with drill-down views.
- Active scan progress monitoring with li feedback.

🔍 Multi-Cloud Resource Explorer:

- Filter by cloud provider, se level, and instant keyword search.
- Detailed findings metadata, affected resource identifiers, and mitigation steps.

📑 Compliance Auditing: Built-in benchmark compliance checks (CIS Benchmarks, SOC 2, HIPAA, NIST, PCI-DSS, GDPR).

📥 Security Finding Ingestion: Import and upload custom scan results (JSON/CSV) with path tra .

🔐 Hybrid Authentication & RBAC:

- Supabase Auth integration with local JWT token fallback.
- Google OAuth single sign-on support.
- Role-Based Access Control (Admin and standard User roles).

🌍 3D Particle Earth UI: Interacti portal screen and ambient background particle animation.

---

🏛️ System Architecture

---

🛠️ Tech Stack

Frontend

Framework: React 18 with Vite

Routing: React Router DOM (v7)

Charts & : Recharts, Canvas 2D/3D Particle Globe

Icons: Lucide React

Auth Client: Supabase JS SDK (/supabase-js, /ssr)

Styling: CSS design system with Dark/Light theme switching

Backend

Framework: FastAPI (Python 3.10+)

Server: U (ASGI)

Database & ORM: SQLAlchemy 2.0, PostgreSQL (psycopg2-binary)

Authentication: Supabase Auth REST, PyJWT, Cryptography, Bcrypt

Cloud SDKs: Boto3 (AWS), Azure Management SDKs (azure-mgmt-compute, azure-mgmt-network, azure-mgmt-storage, azure-mgmt-resource, azure-identity)

AI Integration: OpenAI Python Client

Data : Pydantic v2 & Pydantic-Settings

DevOps & Infrastructure

Containers: Docker & Docker Compose

PaaS Deployment: Render (render.yaml)

IaC: Terraform configuration templates

---

📁 Repository Structure

---

🚀 Getting Started

Prerequisites

Node.js: v18.0.0 or higher & npm

Python: 3.10 or higher & pip

Git

*(Optional)* Docker Desktop for containerized execution

---

Quick Start (Windows)

Launch both Frontend and Backend concurrently with one click:

Option 1: Using Batch Script

Option 2: Using PowerShell Script

Both services will start in independent terminals:

Frontend Web App:

Backend API:

Interacti Docs:

---

Manual Setup

#### 1. Clone the Repository

#### 2. Backend Setup

Backend will be accessible at:

#### 3. Frontend Setup

In a new terminal window:

Frontend will be accessible at:

---

Running with Docker Compose

Run the complete stack including PostgreSQL database:

To stop containers:

---

⚙️ Configuration & En

Backend (backend/.env)

Frontend (frontend/.env)

---

📡 API Documentation

FastAPI provides automated interactive API documentation:

Swagger UI:

ReDoc:

Key Endpoints

| Method | Endpoint | Description |
| :--- | :--- | :--- |
| GET | /health | Ser check and Supabase connectivity status |
| POST | /api/v1/auth/login | User login (Supabase or local JWT fallback) |
| POST | /api/v1/auth/register | New user account registration |
| POST | /api/v1/auth/google | Google SSO authentication |
| GET | /api/v1/auth/me | Current authenticated user profile |
| GET | /api/v1/dashboard/stats | Security score, issue counts, and posture trend |
| POST | /api/v1/scan/start | Trigger a cloud scan across AWS/Azure/GCP |
| GET | /api/v1/scan/status | Real-time scan progress and status |
| POST | /api/v1/scan/upload-results | Ingest external scan files |
| GET | /api/v1/resources | Query discovered resources by cloud, se, or search |
| GET | /api/v1/recommendations | List AI-dri recommendations |
| POST | /api/v1/recommendations/{id}/apply | Apply auto-remediation for a specific finding |
| POST | /api/v1/recommendations/clear-all | Resolve and dismiss all open risks |
| GET | /api/v1/compliance | Benchmark compliance audit reports |
| GET | /api/v1/settings | Retrie cloud integration configurations |
| POST | /api/v1/settings | Update cloud provider API credentials and options |

---

📜 Compliance Standards

The scanner infrastructure configurations against recognized security frameworks:

CIS Benchmarks (AWS Foundations, Azure Foundations)

NIST SP 800-53

SOC 2 Type II (Trust Services Criteria)

PCI-DSS v4.0

HIPAA Security Rule

ISO/IEC 27001

---

📄 License

This project is licensed under the MIT License.

项目信息

开发语言：JavaScript

Star 数：26

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Cloud Security Scanner is a tool that automatically scans cloud environments to identify security vulnerabilities, misconfigurations, and compliance risks, helping organizations protect their cloud infrastructure.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。