# cloudsplaining を Homebrew でインストール cloudsplaining のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:cloudsplaining ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install cloudsplaining ``` 証拠: local Homebrew formula metadata ## パッケージ情報 - **パッケージキー:** brew:cloudsplaining - **パッケージマネージャ:** Homebrew - **パッケージマネージャページ:** - **バージョン:** 0.9.1 - **ソース概要:** AWS IAM Security Assessment tool - **ホームページ:** - **リポジトリ:** - **上流ドキュメント:** - **ライセンス:** BSD-3-Clause - **ソースアーカイブ:** - **最終更新:** 2026-06-16T04:27:03Z - **生成日時:** 2026-08-04T22:13:35+00:00 ## 実行可能ファイル - cloudsplaining (cli) - cloudsplaining (エイリアス) ## 依存関係 - certifi - libyaml - python@3.14 ## ビルド依存関係 - rust ## インストール挙動 - post-install フック: 未定義 - Bottle: 利用可能 対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## バージョンと鮮度 - ページ生成日: 2026-08-04 - マネージャ版: 0.9.1 - マネージャ更新日: 2026-06-16 - ローカルデータ: OK - 上流リポジトリ: https://cloudsplaining.readthedocs.io/en/latest/ - 情報: Release/tag comparison is only available for GitHub repositories. ## プロジェクトの歴史と使われ方 Cloudsplaining is a Salesforce open source command-line tool for auditing AWS IAM policies and producing risk-prioritized least-privilege reports. ### プロジェクトの歴史 The project was created as a companion to Salesforce's Policy Sentry work: the README explains that Policy Sentry made least-privilege policy creation easier, but existing AWS accounts still had large backlogs of broad IAM policies that needed assessment. Cloudsplaining's public release stream began in 2020, with the GitHub releases page marking version 0.0.2 as the open source release. The tool's core model has remained a CLI workflow that downloads AWS IAM account authorization details, scans them, and emits HTML plus JSON results. ### 採用の歴史 The upstream README documents installation through pip and Homebrew, including Salesforce's Homebrew tap, making it easy to put the scanner into Unix security and cloud-audit workflows. Its adoption niche is AWS security engineering, penetration testing, and compliance review: it focuses on practical IAM risks such as data exfiltration, infrastructure modification, resource exposure, privilege escalation, and credentials exposure. ### 使われ方 Typical use starts with configured AWS credentials, `cloudsplaining download` to collect account authorization details, `cloudsplaining create-exclusions-file` to generate `exclusions.yml`, and `cloudsplaining scan` to generate reports. The CLI can also scan a single IAM policy file, which makes it useful both for full-account audits and for reviewing individual policy documents during development. ### パッケージ好きにとっての重要性 Cloudsplaining is a good example of a cloud-security Python tool packaged for both pip and Homebrew: it turns a cloud API audit into a repeatable shell command that can live in developer laptops, CI jobs, and consulting toolkits. ### タイムライン - 2020: Version 0.0.2 was published as the open source release on GitHub. - 2020: Early releases added HTML report improvements, recursive scanning, trust-policy reporting, and automated Homebrew updates. - 2020: The README documented both pip and Homebrew installation paths. ### Related projects - Policy Sentry is the closest related Salesforce project and is cited in the README as the motivation for Cloudsplaining. - Cloudsplaining also intersects with AWS IAM, AWS SecurityAudit-style permissions, and IAM privilege-escalation research such as Pathfinding.cloud. ### ソース - - - ## セキュリティノート infrastructure mutation or orchestration signal. - **Geiger リスク:** orange / 中 - infrastructure mutation or orchestration signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ./exclusions.yml ## Credential files - Unix: ~/.aws/credentials ## ソースデータベース詳細 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** cloudsplaining - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## 関連リンク - [Cloud CLI packages](https://pkg.so/ja/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Secret-risk packages](https://pkg.so/ja/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://pkg.so/ja/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/ja/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [python@3.14](https://pkg.so/ja/brew/python-3-14/) - Runtime dependency declared by Homebrew. - [rust](https://pkg.so/ja/brew/rust/) - Build dependency declared by Homebrew. - [policy_sentry](https://pkg.so/ja/brew/policy-sentry/) - Shares pkgdb curated category or tags: aws, cli, iam, least-privilege, security. - [parliament](https://pkg.so/ja/brew/parliament/) - Shares pkgdb curated category or tags: aws, cli, iam, policy-analysis, security. - [aws-rotate-key](https://pkg.so/ja/brew/aws-rotate-key/) - Shares pkgdb curated category or tags: aws, cli, iam, security. - [trailscraper](https://pkg.so/ja/brew/trailscraper/) - Shares pkgdb curated category or tags: aws, cli, iam, security. - [rolesanywhere-credential-helper](https://pkg.so/ja/brew/rolesanywhere-credential-helper/) - Shares pkgdb curated category or tags: aws, cli, iam, security. - [principalmapper](https://pkg.so/ja/brew/principalmapper/) - Shares pkgdb curated category or tags: aws, cli, iam, security. - [terraform-iam-policy-validator](https://pkg.so/ja/brew/terraform-iam-policy-validator/) - Shares pkgdb curated category or tags: aws, cli, iam, security. - [cliam](https://pkg.so/ja/brew/cliam/) - Shares pkgdb curated category or tags: aws, cli, iam, security. ## Combined YAML source View the package source record on GitHub. [combined/cloudsplaining.yml](https://github.com/mxcl/pkgdb/blob/main/combined/cloudsplaining.yml) ## ソース - pkg.so package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - cross-ecosystem install command graph