Cloudsplaining — The Cyber Toolchain

Cloudsplaining 0.9.1

Sun, 14 Jun 2026 23:50:18 GMT

Cloudsplaining 0.9.1 sorts principals alphabetically by name in reports and quiets library logging noise. • Sorts IAM principals alphabetically by name (instead of ID) in generated reports, making large reports easier to navigate. • Routes exclusion-match messages through logging instead of stdout, keeping library integrations quiet without changing CLI behavior. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudsplaining

Cloudsplaining 0.9.0

Sun, 14 Jun 2026 01:53:02 GMT

Cloudsplaining 0.9.0 adds 37 new privilege-escalation detections linked to pathfinding.cloud for deeper IAM attack-path analysis. • Adds 37 new IAM privilege-escalation path detections linked to pathfinding.cloud for enriched attack-path context in reports. • Integrates pathfinding.cloud onboarding skill pipeline and safety tooling for guided privilege-escalation analysis. Breaking changes: • Python 3.9 is no longer supported; environments running Python 3.9 will fail to install or run Cloudsplaining 0.9.0. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudsplaining

Cloudsplaining 0.9.0

Sun, 14 Jun 2026 01:53:02 GMT

Cloudsplaining 0.9.0 adds 37 new privilege-escalation detections linked to pathfinding.cloud. • Adds 37 new privilege-escalation path detections integrated with pathfinding.cloud, surfaced and linked directly in the HTML report. • Enriches the built-in example dataset to produce a higher-quality demo report with more representative findings. Breaking changes: • Python 3.9 is no longer supported • Node 18 and Node 22 are no longer supported Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudsplaining

Cloudsplaining 0.8.2

Fri, 10 Oct 2025 21:27:22 GMT

Cloudsplaining 0.8.2 adds custom guidance and appendices support plus Python 3.14 compatibility. • Supports custom guidance and appendices in reports, allowing practitioners to embed organization-specific remediation advice. • Supports Python 3.14. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudsplaining

Cloudsplaining 0.8.1

Tue, 30 Sep 2025 05:18:59 GMT

Cloudsplaining 0.8.1 adds assume role support for scanning cross-account or role-based AWS environments. • Adds assume role support, enabling Cloudsplaining to scan IAM policies by assuming a specified AWS role. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudsplaining

Cloudsplaining 0.7.0

Sun, 15 Sep 2024 16:43:48 GMT

Adds Python 3.13 support and performance improvements in Cloudsplaining 0.7.0. • Improves performance with small optimizations Breaking changes: • Python 3.7 support is dropped; the tool no longer runs on Python < 3.8 • Node 16 is dropped from supported CI environments Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudsplaining

Cloudsplaining 0.6.2

Thu, 12 Oct 2023 21:27:21 GMT

Cloudsplaining 0.6.2 adds internet-reachable check for ResourcePolicyDocument and extends credential exposure actions. • Creates a `ResourcePolicyDocument` with an internet reachable check • Extends the list of actions exposing credentials Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudsplaining

Cloudsplaining 0.6.1

Tue, 29 Aug 2023 21:08:53 GMT

Cloudsplaining 0.6.1 adds --flag-all-risky-actions CLI flag and federated principal support. • Adds `--flag-all-risky-actions` CLI argument to force all risky actions flagged regardless of conditions • Supports federated principals in analysis results Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudsplaining

Cloudsplaining 0.5.0

Wed, 09 Feb 2022 20:24:18 GMT

Cloudsplaining 0.5.0 adds noisy results flagging for risky actions regardless of resource constraints. • Adds support for optional noisy results that flag risky actions even when resource constraints or conditions are used. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudsplaining