coffeecocoo Goto Github PK

alldaydevops-aism

All Day DevOps - Automated Infrastructure Security Monitoring and Defence (ELK + AWS Lambda)

ami-spec

Acceptance testing your AMIs

aws-automating-security-group-updates

This post will explore the idea of using an AWS Lambda function, in combination with AutoScaling Lifecycle Hooks and a DynamoDB table, to automatically update security groups for a dynamic environment on your behalf, leaving you with automatically scoped down security groups.

aws-config-engine-for-compliance-as-code

Manage compliance automation and oversight in AWS multi-account environment; with deployment and analytics using pre-defined set of AWS Config Rules (RuleSet).

aws-config-rdk

The AWS Config Rules Development Kit helps developers set up, author and test custom Config rules. It contains scripts to enable AWS Config, create a Config rule and test it with sample ConfigurationItems.

aws-config-rules-template

A collection of AWS Config Rules examples for applying the CIS Benchmarks for AWS.

aws-metadata-php-page

Queries metadata address on AWS EC2 instances to help see what machine you hit behind an ELB

aws-security-automation

Collection of scripts and resources for DevSecOps and Automated Incident Response Security

aws-security-webinar-june-2018

AWS Security Webinar - June 2018

aws-serverless-config-rules-workshop

Content and Instructions for completing the "Making Things Right with AWS Lambda and AWS Config Rules" Workshop.

awsinventorylambda

Save AWS inventory as CSV on S3 and trigger emails

cfn_nag

Linting tool for CloudFormation templates

checkov

Prevent cloud misconfigurations during build-time for Terraform, CloudFormation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.

config-rule-status

A project to create AWS Config Rules and use them to test AWS Resource compliance.

cwe-monitor-secgrp

This CloudWatch Events rule Lambda function evaluates AWS API calls that change Amazon EC2 security group ingress rules. The function flags rules that violate a preconfigured policy.

la-aws-security_specialty

Learning Activities for the AWS Security Specialty Course

lambda-update-security-group

lambda_s3_logging_security

python-aws-dynamo-security-group

Python script that updates a security groups inbound filter, if a database entry does not match the last known ip. Its a companion to a lambda execution that tracks my ip.

terragoatx

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

test

watchmen

Watchmen - AWS account compliance using centrally managed Config Rules