Ashish's Projects
Amazon EKS Labs for Cloud Security Bootcamp - 2024 Training
AWS Inventory and Compliance Framework
Assisted Log Enabler for AWS - Find AWS resources that are not logging, and turn them on.
Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security
A curated list of GPT agents for cybersecurity
A collection of awesome AWS S3 tools that collects and enumerates exposed S3 buckets
Curated list of resources for security Governance, Risk Management, Compliance and Audit professionals and enthusiasts (if they exist).
Add extra information of your AWS CodeBuild build via environment variables.
The focus of this project is on the programmatic "rolling" of AWS IAM access keys. This involves creating new keys to replace previous ones, on a regular basis. This process shortens the period an access key is active and therefore reduces the business impact if one becomes compromised.
Discover resources created in an AWS account.
Nuke a whole AWS account and delete all its resources.
AWS SCP Best Practices
Contains Lambda functions to be used for automatic rotation of secrets stored in AWS Secrets Manager
[AWS Training Architecture Example]
Collection of scripts and resources for DevSecOps and Automated Incident Response Security
Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
List of all the Publicly disclosed vulnerabilities of Public Cloud Provider like Amazon Web Services (AWS), Microsoft Azure, Google Cloud, Oracle Cloud, IBM Cloud etc
Cloud Guardian is an AI based Cybersecurity Assistant with deep knowledge for Cloud Security in Public & Hybrid Cloud environments.
CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
cloudquery transforms your cloud infrastructure into queryable SQL tables for easy monitoring, governance and security.
Cloud Security Posture Management (CSPM)
ConsoleMe consolidates the management of multiple AWS accounts into a single interface. It allows your end-users and administrators to get credentials for your different accounts, and allows your users/administrators to manage or request cloud permissions.
A Library of various cybersecurity resources
Vulnerable Docker Repository for Testing
Forseti Security
Demo for Github Advanced Security Labs
An example of infrastructure and application CI/CD with AWS CodePipeline, AWS CodeBuild, AWS CloudFormation and AWS CodeDeploy