Code examples for the AWS Security Blog post: How to use CI/CD to deploy and configure AWS security services with Terraform

A Lambda-powered Security Orchestration framework for AWS GuardDuty

Enables AWS GuardDuty and sends findings to an SNS topic.

Deep Security's APIs make it simple to integration with a variety of AWS Services

Perform file-based malware scan on your on-prem servers with AWS

Configure and deploy AWS GuardDuty.

No description provided.

Go straight from Guard Duty alerts to Automated Investigations in AWS with Cado Response

CloudFormation Template that leverages a Custom Resource to invoke a Lambda Function that configures Amazon GuardDuty across the Organization. Specifically this has been designed for the purpose of implementing via Customisations for Control Tower

This repo contains the lambda function code that can leverage AWS GuardDuty findings to prevent malicious IPs and domains from accessing your AWS hosted applications by using threat intel from the GuardDuty findings and using it to complement Illumio policy rules

Easily identify IAM users that have triggered GuardDuty findings.

This project showcases the process of assessing the security state of a sample web app deployed in AWS and the process of hardening its security. Project 3 from the AWS Cloud Architect Nanodegree from Udacity. Misc: Security Monitoring in AWS.

batCAVE Security Data Lake daily reporting automation

AWS Professional Services Hub

Demonstrates enabling GuardDuty S3 Malware Protection for an S3 bucket.

Provisioning AWS Landing Zone with AWS CLI

In this project, I deploy and assess a simple web application environment’s security posture. I have a chance to test the security of the environment by simulating an attack scenario and exploiting cloud configuration vulnerabilities. Similarly, I set up monitoring to identify suspicious behavior and vulnerable configurations and will remediate the identified misconfigurations. Ultimately, I tie it all together by proposing a DevOps build pipeline that includes security best practices.

AWS GuardDuty demo with S3, RDS, EC2

Garrison Agent that mirrors AWS GuardDuty alerts and some extra compliance checks

No description provided.

Terraform Component for AWS GuardDuty

Field guide for threat hunting in AWS: workbooks, queries, and frameworks tailored for CloudTrail, GuardDuty, Detective, and real-world SOC investigations.

Built a cloud-based security monitoring solution on AWS using GuardDuty, Lambda, and EventBridge for real-time threat detection, alerting, log analysis, and automated incident response.

AWS GuardDuty service configuration and deployment