cwe-monitor-secgrp
by awslabs
This CloudWatch Events rule Lambda function evaluates AWS API calls that change Amazon EC2 security group ingress rules. The function flags rules that violate a preconfigured policy.
AI summary
Permission checker
A CloudWatch Events rule Lambda function that checks security group permissions against a pre-configured policy and logs non-compliant changes.
- stars
- 25
- forks
- 30
- watching
- 58
- awesome list
- 1
Similar projects
Found by comparing what the projects do, not just their names.
Instance Patcher
Automatically patches vulnerable EC2 instances after receiving an Inspector assessment notification
EC2 instance deployer
Automates deployment of security agent to newly launched EC2 instances using AWS Lambda and SSM
Inspector processor
Script to process and forward Amazon Inspector findings via SNS to a specified email address.
Policy generator
Automatically generates AWS Service Control Policies based on compliance frameworks and custom service inclusions/exclusions
Metric viewer
Exposes AWS Cloudwatch Metrics as a public HTML page using AWS Lambda and server-side rendering
Object Checker
Identifies publicly accessible objects in an AWS S3 bucket based on effective permissions
Task processor
This code example illustrates how to extend AWS Lambda functionality using Amazon SQS and the Amazon EC2 Container Service (ECS) to process large tasks outside of Lambda's execution time limit.
AWS tools
Automated incident response and security remediation tools for AWS services
Database loader
An AWS Lambda function that automates data loading from Amazon S3 into an Amazon Redshift database cluster
Token monitoring tool
Detects suspicious temporary token usage in an AWS account to identify potential security threats.
AWS Lambda with OpenCvSharp
A proof-of-concept project demonstrating the use of OpenCvSharp in an AWS Lambda function.
AWS service scanner
A set of automated security checks for AWS services written in Python to identify potential vulnerabilities and configuration issues.
Policy auditor
A tool that scans AWS IAM policies to identify security vulnerabilities and generates a report with recommendations for remediation
Web attack protection tool
Automates deployment of AWS WAF security rules to protect against common web-based attacks
Config checker
An evaluation tool for policy-as-code in infrastructure configuration files
Featured in 1 awesome list
Each link jumps to the spot where the list mentions cwe-monitor-secgrp.
