Skip to content
LambdaGuard: AWS Serverless Security
Branch: master
Clone or download
Latest commit 4cd2b2c May 1, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
bin Open Source Apr 29, 2019
lambdaguard Bump version May 1, 2019
tests Open Source Apr 29, 2019
.gitignore Open Source Apr 29, 2019
CONTRIBUTING.md Open Source Apr 29, 2019
LICENSE Open Source Apr 29, 2019
MANIFEST.in Open Source Apr 29, 2019
Makefile Open Source Apr 29, 2019
README.md Update name and logo May 1, 2019
SonarQube.Dockerfile Open Source Apr 29, 2019
setup.py Update name and logo May 1, 2019
sonarqube-setup.py Open Source Apr 29, 2019

README.md

LambdaGuard LambdaGuard

AWS Lambda is an event-driven, serverless computing platform provided by Amazon Web Services. It is a computing service that runs code in response to events and automatically manages the computing resources required by that code.

LambdaGuard is an AWS Lambda auditing tool designed to create asset visibility and provide actionable results. It provides a meaningful overview in terms of statistical analysis, AWS service dependencies and configuration checks from the security perspective.

Requirements

  • Python 3.6.3+
  • Java 8+ (optional for SonarQube)

Install

From PyPI

pip3 install lambdaguard

From Github

git clone https://github.com/Skyscanner/lambdaguard
cd lambdaguard
sudo make install

Run

  • lambdaguard --help
  • lambdaguard --function arn:aws:lambda:function
  • lambdaguard --input function-arns.txt
  • lambdaguard --output /tmp/lambdaguard
  • lambdaguard --profile aws-profile
  • lambdaguard --keys ACCESS_KEY_ID SECRET_ACCESS_KEY
  • lambdaguard --region eu-west-1
  • lambdaguard --verbose

SonarQube: Static Code Analysis

Build SonarQube

  • make sonarqube

Use SonarQube

  • lambdaguard --sonarqube config.json

Config should have the following format:

{
    "command": "java -jar /opt/sonar-scanner-cli.jar -X",
    "url": "http://localhost:9000",
    "login": "admin",
    "password": "admin"
}

Development

make -i clean
make dev
. dev/bin/activate
make install-dev
make test
You can’t perform that action at this time.