Frontdoor

About

Frontdoor is a read-only command-line scanner that maps federated trust into AWS, GCP and Azure accounts. It reads OIDC, SAML and cross-account trust policies to show which outside identities can obtain credentials and how far they reach, including paths from AWS into GCP. For example, it flags a role that trusts any GitHub Actions tenant because the subject claim is unchecked, and shows a fix. It ships as a single binary with no database.