orangutang

aws-cdk-examples

Example projects using the AWS CDK

iamlive

Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy

terraform-up-and-running-code

Code samples for the book "Terraform: Up & Running" by Yevgeniy Brikman

DevSecOps-Playbook

This is a step-by-step guide to implementing a DevSecOps program for any size organization

dsl

Structurizr DSL

terraform-aws-secure-baseline

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

aws-secure-environment-accelerator

The AWS Secure Environment Accelerator is a tool designed to help deploy and operate secure multi-account, multi-region AWS environments on an ongoing basis. The power of the solution is the configuration file which enables the completely automated deployment of customizable architectures within AWS without changing a single line of code.

ZeusCloud

Open Source Cloud Security

gitoops

all paths lead to clouds

sadcloud

A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure

awesome-opensource-security

A list of interesting open-source security tools, mostly reviewed and commented by me.

aws-recon

Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.

continuous-threat-modeling

A Continuous Threat Modeling methodology

quiet-riot

Unauthenticated enumeration of AWS, Azure, and GCP Principals

actions2aws

Assume AWS IAM roles from GitHub Actions workflows with no stored secrets

aws-iam-permissions-guardrails

AWS IAM Permissions Guardrails https://aws-samples.github.io/aws-iam-permissions-guardrails/

amazon-ec2-image-builder-samples

Samples for Amazon EC2 Image Builder

aws-guides

AWS docs, guides, and other tools

aws-scripts

Some useful AWS scripts

Dependency-Check_Action

Github action to run dependency check

Cloud-Custodian

Cloud Custodian Policy Files and code

vscode-aws-cloudshell

(Unofficial) AWS CloudShell plugin for VS Code

aws-terraform

AWS & Terraform Rocket Start Guide

cloudcustodian-rules

Some of my personal rules for CapitalOne's Cloud Custodian project

IncidentResponseGenerator

Updated incident response generator for training classes

aws-cdk-imagebuilder-pipeline

git-remote-aws

AWS accounts as Git remotes

cloud_metadata_ips

List of special metadata IPs used in cloud services

CDKImagebuilderWindowsPipeline

An AWS Image Builder pipeline built with AWS CDK

s3-crr-with-kms-encryption

Replicating Encrypted Objects