A solution for collecting, correlating and visualizing multiple types of logs to help investigate security incidents.

DBTop Monitoring is lightweight application to perform realtime monitoring for AWS Database Resources. Based on same simplicity concept of Unix top utility, provide quick and fast view of database …

The AWS Config Rules Development Kit helps developers set up, author and test custom Config rules. It contains scripts to enable AWS Config, create a Config rule and test it with sample Configurati…

A Pluggable Terraform Linter

Example projects using the AWS CDK

Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans…

Test all the CloudFormation things! (with TaskCat)

A curated list of awesome actions to use on GitHub

Automated Security Response on AWS is an add-on solution that works with AWS Security Hub to provide a ready-to-deploy architecture and a library of automated playbooks. The solution makes it easie…

🍇 This is a small framework to make it easier to work with AWS CloudFormation files.

Create your own vulnerable by design AWS penetration testing playground

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.