awssecurity

OWASP EKS Goat is a deliberately vulnerable EKS cluster environment to explore AWS cloud-native security through hands-on attack and defense labs with walkthrough.

Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a list of the 2022 Top 7 Cloud Attack Paths across AWS, Azure, GCP, and Kubernetes as seen on the Lightspin Cloud Native Application Protection Platform.

A collection I've created of walkthroughs and related code to build and deploy AWS security-related services, use cases, and architectural designs.

#100DaysOfCloud #100DaysOfCyberSecurity snippets starting from 28 SEPT 2022

Chrome extension to bulk edit environment variables in AWS elastic beanstalk.

This python script takes input in the form of a text files with all s3buckets and check for pubic access, writes paths in a file, tries to read all the files present in it by enumerating and also checks for any sensitive info like api keys,db cerds and passwords and writes all the files that have this info in them in a file called juciy_info.txt

A lambda script written in Python to list and generate a report of AWS ECR security findings send it to an S3 Bucket and generate notifications to email and slack via SNS.

Implemented AWS GuardDuty for threat detection, investigated critical IAM credential compromise findings, and documented incident response procedures.

Productionizing Image Classification with AWS SageMaker This project extends an image classification pipeline to a production-ready ML system using AWS SageMaker. It includes multi-instance training, EC2 deployment, Lambda integration, auto-scaling, and security configuration for efficient, scalable, and secure model serving.

A Python-based Cloud Security Posture Management platform for security assessment, risk analysis, AWS security monitoring, compliance evaluation, alerting, incident management, and security reporting.