This repository contains a collection of useful solutions for automation within an AWS account.
[Navigate to subdirectories for more detailed READMEs]
Repository currently includes:
s3/ensure-logging-enabled- ensures audit logging is enabled on newly created S3 buckets
- uses AWS Lambda and CloudWatch events
- easily deployable using Serverless Framework
s3/ensure-versioning-enabled- ensures versioning is enabled on newly created S3 buckets
- uses AWS Lambda and CloudWatch events
- easily deployable using Serverless Framework
s3/recursive-bucket-scanner- Node.js utility to recursively scan an S3 bucket and print list of globally accessible objects
Future ideas:
- Lambda function to notify of globally accessible S3 buckets in account
- Lambda function to notify when an AWS Config rule enters noncompliant state
- Lambda function to serve as a cron health check for a REST service
- Lambda functions to ensure EC2 compliance:
- presence of tag (e.g. POC)
- approved AMI
- approved instance type
Development
Want to contribute? Great! Submit a pull request.
License
MIT