OSS

Even in shops that live by infrastructure as code, someone eventually opens the AWS Console and clicks. A quick fix during an incident, a security group tweak, a “temporary” instance. That is ClickOps, and it is how drift and silent risk creep into an otherwise clean account. I built ClickOps Sentinel at zoph.io to catch those moments and, more importantly, to tell me what they actually mean. Detecting console changes Detection relies on the CloudTrail sessionCredentialFromConsole flag, which AWS sets server-side for every API call made with console session credentials. No user-agent guessing, no CloudTrail trail to create, no S3 log parsing. ...

As businesses continue to adopt cloud computing and move their operations to the cloud, it’s crucial to ensure the security of their cloud environment. Amazon Web Services (AWS) is the leading cloud platform, but with the ease of use comes the responsibility of securing the data, applications, and services deployed on the cloud. AWS provides a vast array of security services, but it can be challenging to keep track of all the activities and changes happening in your AWS account. That’s where the AWS Security Survival Kit (ASSK) comes in. This comprehensive and free open-source kit sets up basic proactive monitoring and alerting on common suspicious activities in your AWS account. ...

Are you tired of manually checking your AWS subnets to make sure they’re not approaching the free remaining IP limit? Look no further than Subnet-Watcher, an open-source tool I’ve developed at zoph.io. Subnet-Watcher allows you to automatically check your subnets for a variety of metrics, such as whether they have the correct number of available IP addresses, or the number of detached ENIs. It also allows you to take action if any of these conditions are not met, such as sending an email notification and automatically recording a CloudWatch Metric. ...