Popular repositories Loading

1. aws-security-posture-scanner aws-security-posture-scanner Public

   Agentless AWS security posture scanner (mini-CSPM) built in Python — audits IAM, S3, GuardDuty, and Security Hub for misconfigurations. Deploys as a scheduled Lambda via Terraform

   Python

2. aws-secure-landing-zone aws-secure-landing-zone Public

   Production-ready AWS secure landing zone: multi-AZ VPC with Transit Gateway, private EKS cluster with IRSA & IMDSv2, WAFv2, GuardDuty org-wide, Security Hub CIS benchmarks, and CloudTrail — all in …

   HCL

3. gcp-secure-platform gcp-secure-platform Public

   Production-grade GCP security platform: Shared VPC, private GKE with Workload Identity & Binary Authorization, Cloud Armor WAF, org policy enforcement, and SCC findings export — all in Terraform

   HCL

4. gcp-org-policy-enforcer gcp-org-policy-enforcer Public

   Python + GitHub Actions CI tool that audits GCP projects against required org policies — blocks PRs on HIGH/CRITICAL violations and posts findings as PR comments

   Python

5. terraform-gcp-modules terraform-gcp-modules Public

   Reusable security-hardened Terraform modules for GCP: private Cloud Run, Cloud SQL with no public IP, Secret Manager with CMEK, and Artifact Registry

   HCL

6. aws-lambda-security-automations aws-lambda-security-automations Public

   Python Lambda functions that auto-remediate AWS security misconfigurations: S3 public access, overly permissive security groups, and IAM key rotation enforcement

   Python