Add cloud-audit - AWS security scanner

[gebalamariusz]

Adds cloud-audit to the Cloud category.

cloud-audit is an open-source AWS security scanner (MIT license) with:

• 47 curated checks (IAM, S3, EC2, RDS, VPC, Lambda, KMS, Secrets Manager)
• Copy-paste remediation in both AWS CLI and Terraform for every finding
• Attack chain detection (16 rules correlating findings into exploitable paths)
• Built-in diff command for CI/CD pipeline gating
• SARIF output for GitHub Code Scanning
• ~12 second scan time for a full AWS account

Similar to Prowler (already listed) but with an opinionated, low-noise approach and Terraform remediation output.

[mre]

Reopening this: the stale bot closed it without a review. Thanks for the submission, and sorry it fell through the cracks. The project now meets our published maturity criteria, and live AWS security auditing fits the catalog alongside Prowler.

Could you update the homepage to https://haitmg.pl/cloud-audit/ and refresh the description? Please drop the fixed check count and describe correlated attack paths as potential paths rather than demonstrated exploitation. For example:

Read-only AWS security scanner that checks deployed resource configurations through AWS APIs. Correlates findings into potential attack paths, provides AWS CLI and Terraform remediation guidance, and compares scan results to track security-posture changes.

The existing cloud tag, linter category, MIT license, and CLI type look appropriate. We have just added CI checks for catalog entries and contribution criteria; reopening this should give us a chance to exercise those too.