Skip to content

Instantly share code, notes, and snippets.

@tolidano
Forked from markofu/Security_Tools_for_AWS.MD
Created September 21, 2019 02:33
Show Gist options
  • Save tolidano/4182fe3e232fdd80d18cd4e881c9097e to your computer and use it in GitHub Desktop.
Save tolidano/4182fe3e232fdd80d18cd4e881c9097e to your computer and use it in GitHub Desktop.
Security Tools for AWS

Security Tools for AWS

I often get asked which tools are good to use for securing your AWS infrastructure so I figured I'd write a short listof some useful Security Tools for the AWS Cloud Infrastructure.

This list is not intended be something completely exhaustive, more so provide a good launching pad for someone as they dig into AWS and want to make it secure from the start.

Open Source

This section focuses on tools and services provided by the community and released as open-source.

Auth

Tools to help you auth (clients) securely in AWS.

Best Practices & Governance

Tools that enable you to ensure security best practices are followed across your organisation and infrastructure.

Domain Hijacking

DFIR

Tools to help perform Incident Response on AWS

Least Privileges

AWS Least Privilege for Distributed, High-Velocity Deployment

Monitoring / Auditing

Holistic // General

Tools that provide a good way monitoring your overall security posture through scraping configuration and collating it or ingesting logs.

S3

Finding interesting S3 buckets through monitoring certificate transparency logs

Secrets

Secret Keeper

AWS

This section focuses on tools and services provided by AWS for a nominal charge or as part of their overall service.

Auth

Services that provide authentication and authorisation to AWS services, with STS enabling that access to be through temporary credentials.

Best Practices & Governance

Service that helps your monitor your AWS services holistically to reduce cost, ensure best practices are being followed and improve security.

Monitoring / Auditing

AWS service that enable your to audit and monitor your configurations and API calls.

Network Perimeter Visibility

AWS Service that is essentially a managed threat detection service that continuously monitors for malicious behaviour to help you protect your AWS accounts and workloads. One of the few things to provide visibility of your external perimeter in AWS.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment