BucketSentry

BucketSentry is a web app (with optional CLI) that continuously monitors cloud storage configurations and sharing pathways across AWS S3, Azure Blob, and Google Cloud Storage. It focuses on the boring-but-deadly stuff teams miss: accidental public access, overly broad IAM policies, stale presigned URLs, anonymous links, cross-account access, and misconfigured lifecycle/replication that pushes sensitive data into the wrong region or tier. Instead of dumping alerts, it maps each risky object/bucket to the exact exposure path (policy + principal + condition) and provides a one-click, reversible fix with an audit trail. It also generates “proof” reports for SOC 2/ISO 27001: what was exposed, for how long, who fixed it, and what controls are now enforced. This is a combination app: traditional rules + AI-assisted explanation of findings and remediation steps.