Minimalist containerized implementation of Prowler from https://github.com/toniblyx/prowler, made to run within ECS Fargate and have Secrets passed via AWS Secrets Manager

Setting up Prowler to run in a set of containers on ECS and save to S3

Create an IAM OIDC for AWS EKS and an IAM role to be used in the PODs

Terraform module which creates EC2-VPC security groups on AWS

(WIP) A terraform / kitchen-terraform hardening baseline for the cis-aws-foundations-baseline

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand AWS resources enabling you to pentest Vulnerabilities within, and hence, gain a better understanding of what could go wrong and why!!

TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.

This is a "Vulnerable by Design" Terraform repository.

Configure and deploy AWS Security Hub.

Código fuente con configuración utilizada para el desarrollo del trabajo de graduación de Sergio Rodas

AWS Network Firewall traffic control

Data lock mechanisms available on AWS.

S3 MFA with CMK

S3 cross-region replication with SSE-KMS

AWS Kinesis services architecture

CloudTrail custom alarms

Configure and deploy Amazon Shield Advanced

AWS KMS grants applied in different scenarios using Terraform