barnesrobert Goto Github PK

amazon-bedrock-samples

This repository contains examples for customers to get started using the Amazon Bedrock Service. This contains examples for all availble foundational models

aws-cloud-wellness

Checks a given AWS account against a set of security best practices

aws-cloudformation-user-guide

The open source version of the AWS CloudFormation User Guide

aws-config-engine-for-compliance-as-code

Provide compliance oversight and analytics in AWS multi-account environment; using compliance-as-code engine and pre-defined set of Rules (RuleSet).

aws-config-rules

[Node, Python] Repository of sample Custom Rules for AWS Config.

aws-convert-pfx-to-pem.py

Converts a PFX key into a PEM-encoded key

aws-delete-orphaned-cloudwatch-logs

Deletes CloudWatch log groups that were generated by AWS service resources that no longer exist

aws-detect-extra-regional-activity

Detects activity in AWS regions other than a given expected region

aws-generate-account-policy-password

Generates a random password that complies with the given account's password policy

aws-get-latest-ami-id

Retrieves the latest Amazon Linux AMI ID for each region

aws-iam-baseline

Creates IAM roles, policies, and a SAML provider for the designated account

aws-security-workshops

This repo contains a collection of AWS Security related workshops.

aws-vpc

Creates an AWS VPC that uses parameters to define the network properties

aws-well-architected-labs

Hands on labs and code to help you learn, measure, and build using architectural best practices.

cloudformation-demo

Sample templates used to demonstrate CloudFormation

cloudformation-guard

Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules.

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

create-acm-client-cert

Creates AWS Client VPN certificates

datalake

Data lake as a service

find-aws-resource-in-all-accounts

Lambda function to iterate through all AWS accounts within an organization to find a resource

global-update-s3-bucket-policy-ssl

prowler

AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark (https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf). It performs extra checks as well.

quickstart-duo-mfa

AWS Quick Start Team

quickstart-enterprise-accelerator-cis-benchmark

AWS Quick Start Team

server-fleet-management-at-scale

his solution helps customers more easily manage their fleet of servers, automate software inventory management, OS patch compliance, and run security vulnerability assessments. This solution uses AWS Systems Manager documents to enable configuration as code to mange resources at scale.

utilities

Utilities for AWS services

x_snc_aws_sns