Cloud-audit is an open-source AWS security scanner with 45 checks, CIS benchmark mapping, and copy-paste CLI and Terraform fixes.