mobileatjds

aws-terraform-dev-container

A VSCode Dev Container with tools to help you build and manage AWS infrastructure with Terraform

ModernDataLakeDemo

Modern Data Lake Demo

session-manager-without-igw

aws-control-tower-customizations

The Customizations for AWS Control Tower solution combines AWS Control Tower and other highly-available, trusted AWS services to help customers more quickly set up a secure, multi-account AWS environment using AWS best practices.

amazon-guardduty-cloudwatch-frequency-script

amazon-guardduty-threatintelset-script

awsets

A utility for crawling an AWS account and exporting all its resources for further analysis.

nebula

A scalable overlay networking tool with a focus on performance, simplicity and security

trailscraper

A command-line tool to get valuable information out of AWS CloudTrail

cloudtrail-partitioner

aws_exposable_resources

Resource types that can be publicly exposed on AWS

aardvark

Aardvark is a multi-account AWS IAM Access Advisor API

aws-vault

A vault for securely storing and accessing AWS credentials in development environments

cloudtracker

CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.

leonidas

Automated Attack Simulation in the Cloud, complete with detection use cases.

cartography

Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.

cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

policy_sentry

IAM Least Privilege Policy Generator

cloudformation-guard

Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0

multi-region-infrastructure-deployment

aws-bill-export

Download AWS bills from the console programmatically.

AWSConsoleRecorder

Records actions made in the AWS Management Console and outputs the equivalent CLI/SDK commands and CloudFormation/Terraform templates.

former2

Generate CloudFormation / Terraform / Troposphere templates from your existing AWS resources.

vault-on-aws

A secure HashiCorp Vault for secrets, tokens, keys, passwords, and more. Automated deployment with Terraform on AWS. Configurable options for security and scalability. Usable with any applications and services hosted anywhere.

aws-account-controller

Self-service creation and deletion of sandbox-style accounts.

algo

Set up a personal VPN in the cloud

automated-aws-multi-account-cleanup

Automatically clean-up multiple AWS Accounts on a schedule

aws-cli-multi-account-sessions

bash functions to help run aws-cli commands across roles in multiple accounts with MFA

parliament

AWS IAM linting library

aws-auto-cleanup

Programmatically delete AWS resources based on an allowlist and time to live (TTL) settings