AWS Security Toolbox (AST)

In my day-to-day job, I was wasting my time to keep reinstall, and deal with dependencies of all my favorite tools for AWS Security Audits and Assessments. So, lately, I’ve decided to start another pet project trying to solve this issue and provide a simple Docker container that contains all security-related tooling for your AWS Assessments. I’ve decided to open-source it, after some discussion with my peers, they were interested in this kind of stuff to avoid wasting hours to install a myriad of Apps and Python dependencies on their own laptop or customer machine. ...

December 16, 2019 · 1 min · 146 words · zoph

My Pet Projects

In this article, I will describe my current pets projects. These are mainly excuses to learn something new for me, or exercises to go deeper in particular technologies, but could be (I hope) useful for you too. Don’t hesitate to issue enhancements, bugfix (PR), or just give a try to give me your thoughts. Instance Watcher :construction_worker: Tech: Lambda, Python, Serverless Application Model (SAM), SES This app will scan your AWS Account against all EC2 region worldwide and notify you by email when you have some running EC2 instances. It’s useful for non-production environments that you need to monitor. Usecase: labs/training, sandbox accounts. ...

May 30, 2019 · 3 min · 513 words · zoph

My DevOps toolbox for AWS practitioner

In this post, you will find my best tools to work with if you are playing around with AWS Services. Please let us know yours in the comments below :punch: Last Update: 2019-02-14 General :construction: Description Links Use multiple AWS Accounts on the same browser using Firefox Containers Firefox Containers Facilitate your switch role experience with this AddOn FF - Extend Switch Roles - Chrome - Extend Switch Roles Easy way to know your current public ip, using AWS Service What is my Public IP Check if any website is hosted on AWS Is It on AWS? Test the reachability of EC2 worldwide EC2 Reachability A great reference for IAM, needs to be updated Cloudonaut IAM Reference AWS Transferts costs are a nightmare, this is intended to help a bit AWS Transferts Costs Want to know the current inter AWS Region latency? Inter-Region Latency THE REFERENCE (don’t forget the associate Slack) AWS Open Guide FinOps :dollar: Description Links Compare all existing EC2 instances, and pricing on a single view, with search capabilities ec2instances.info Well known AWS Calculator, a new version is coming AWS Calc Infrastructure as Code (IaC) :memo: Description Links Great post if your plan to use VSCode with CFN VSCode Linter for CFN, and really up-to-date! cfn-lint pycharm is my preferred IDE for Terraform with this plugin Terraform Security / Governance / Hardening :flashlight: Description Links Cloud Governance, Security and compliance made it easy Cloud Custodian Entirely nuke an AWS Account (warning), for example, training accounts aws-nuke Store your AWS credential encrypted, and other cool feature like: login AWS-Vault Least Privileges tool from 0xdabbad00, using Athena and CloudTrail CloudTracker Map / Audit your AWS environments, and much more, Thanks again Scott CloudMapper Schema :triangular_ruler: Description Links Schema / Design your Architecture (with new AWS icons) Draw.io Same, with some advanced paid features ($) CloudCraft See ya Folks. ...

February 14, 2019 · 2 min · 313 words · zoph