Skip to content
View DustyStudy's full-sized avatar

Achievements

Achievement: QuickdrawAchievement: YOLO

Achievements

Achievement: QuickdrawAchievement: YOLO

Block or report DustyStudy

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
DustyStudy/README.md

Dusty

Open-source AWS cloud security tooling focused on FedRAMP, NIST 800-53 Rev5, multi-account governance, and practical day-to-day guardrails — including support for commercial and GovCloud partitions.

I build reusable CloudFormation & Terraform modules, auto-remediation patterns, observability dashboards, and credential/identity tooling that avoid long-lived access keys.

The Suite

Repository Purpose
fedramp-terraform-library Terraform modules implementing NIST 800-53 Rev5 Moderate/High controls + FedRAMP 20x KSIs
fedramp-cfn-library CloudFormation counterpart of the above
aws-cloud-security-toolbox Practical guardrails, auto-remediation, AI/ML protections (CFN + TF)
aws-observability-dashboards CloudWatch dashboards for security posture, Bedrock, agentic AI, NHI, EKS
aws-orgseed Multi-org account seeding via hub-and-spoke OIDC (no long-lived credentials)
aws-orgctl Ephemeral SSO / IAM Identity Center credential manager
ai-terraform-toolkit Security-hardened Terraform modules + Claude / Gemini AI workflows

All libraries emphasize:

  • FedRAMP-aligned controls and honest coverage-gap documentation
  • GovCloud / partition awareness
  • Short-lived credentials only (OIDC / SSO)
  • CI security scanning (Checkov, Trivy, Gitleaks, tflint, etc.)

Focus areas

  • FedRAMP Moderate / High / 20x baselines
  • Multi-account AWS Organizations governance
  • AI/ML (Bedrock, SageMaker, agentic workloads) security
  • Continuous monitoring & observability
  • Zero long-lived credentials patterns

Pinned Loading

  1. aws-cloud-security-toolbox aws-cloud-security-toolbox Public

    Practical AWS security guardrails, auto-remediation, and AI/ML protections — CloudFormation + Terraform, commercial & GovCloud.

    HCL

  2. aws-observability-dashboards aws-observability-dashboards Public

    CloudWatch dashboards for security posture, Bedrock, agentic AI, NHI, and EKS — CloudFormation + Terraform, no extra licensing.

    HCL

  3. aws-orgctl aws-orgctl Public

    Ephemeral AWS multi-account credential manager built on IAM Identity Center / SSO.

    Python

  4. aws-orgseed aws-orgseed Public

    Multi-org AWS account seeding via Terraform and hub-and-spoke OIDC — no long-lived credentials.

    Python

  5. fedramp-terraform-library fedramp-terraform-library Public

    Terraform modules implementing NIST 800-53 Rev5 Moderate/High controls and FedRAMP 20x Key Security Indicators for AWS.

    HCL 1

  6. ai-terraform-toolkit ai-terraform-toolkit Public

    Security-hardened Terraform modules and AI-assisted workflows (Claude Code, Gemini) for multi-account AWS orgs.

    HCL