Cartography

Term 3 · Sep-Nov · 2 projects

• IAM Whatever You Say IAM - GCP and Azure edition

  LFX Mentorship · Listed in the official cohort

  @achantavySource IssueLFX portal

  Want to be a cloud hacker? In the cloud, answering the question "who has access to what" is surprisingly complex: we need to know what identities exist, what permission policies and controls apply to them, what resources (storage, compute, networking) exist, what permissions apply to those, and we need to tie those together. Cartography is an ambitious open source project that aims to do just that. In this project, our goal is to model and map cloud IAM relationships in GCP and Azure so users can answer “who can access what resources” across multi-cloud environments. We previously did this in AWS as seen in “IAM: Whatever You Say I Am”, and we would love to complete our coverage of this across the major cloud providers.

  • Python
  • Ability to handle feedback gracefully is required
  • Familiarity with cloud security permissions and interest in information security strongly preferred
  • Familiarity with cloud IAM (GCP or Azure or AWS)
  • Strong written and verbal communication skills in English required
  • Basic Neo4j/Cypher knowledge a plus but not necessary

• Make map of Azure and Google Compute Cloud resources

  LFX Mentorship · Listed in the official cohort

  @achantavySource IssueLFX portal

  Cartography makes maps of the cloud so that security and devops teams can find and fix problems. Think about it like the Maurauder's Map from Harry Potter. Cartography has very good AWS coverage, but lacks support for many Azure and GCP resources. With your help, we can fix this! Companies around the world use Cartography to better understand their infra, and you can be a part of this. Most of these modules should be conducive to coding with agents (we have a well-documented AGENTS.md!), so if you enjoy writing in Python, want to learn about information security/devops, and moving fast, this is the project for you.

  • Python
  • Ability to handle feedback gracefully is required
  • Strong written and verbal communication skills in English required
  • Interest in cloud security or devops is a plus
  • Basic Neo4j/Cypher knowledge a plus but not necessary
  • Familiarity with LLM-based coding tools is a plus but not necessary

Term 2 · Jun-Aug · 1 project

• Fill in missing AWS resource types for CloudGoat scenarios

  LFX Mentorship · Listed in the official cohort

  @kunaalsSource IssueLFX portal

  Cartography currently does not ingest many of the AWS resource types used in popular CloudGoat attack/detection scenarios. This mentorship project will extend Cartography’s AWS plugin and schema to cover these missing resources, enabling security practitioners to visualize and query full CloudGoat labs end‑to‑end. The mentee will: 1. Audit the AWS resource types used across selected CloudGoat scenarios. 2. Update Cartography’s schema to include each resource, with appropriate labels and key properties. 3. Implement ingestion functions in the AWS plugin, including relationship discovery (e.g., linking log groups to CloudWatch alarms). 4. Add Cypher sample queries and Python examples to the docs demonstrating how to explore one's infrastructure.

  • Python
  • AWS SDK (boto3)
  • Graph databases / Neo4j (Cypher)
  • Familiarity with Cartography’s module architecture
  • Basic security knowledge