cloudg: open-source CLI maps and audits AWS, Azure and GCP resources as a graph

A cloud security practitioner has released cloudg, an MIT-licensed Python tool that builds a connected graph of assets across AWS, Azure and GCP. Unlike scanners that produce flat lists of misconfigurations, cloudg records typed relationships between resources, such as a storage bucket invoking a Lambda function or a function assuming a role. The tool can also run Prowler, ScoutSuite, Checkov and Trivy over the same inventory, attaching each finding to the asset it concerns and mapping results to 28 compliance frameworks. Users can query dependencies with the deps command, and the cloudg run pipeline produces an offline HTML report with a topology view and findings table. The current release on PyPI is version 0.6.1, and the project requires Python 3.11 or newer.