Open Source
11 items across 1 section
Inside lambda-security-scanner: 19 Checks Across Every Function in Your Account
Part 2 of 4 in the Lambda Security Series. A deep look at lambda-security-scanner: 19 read-only checks across configuration, access control, network, logging, and supply chain, scored 0 to 100 and mapped to ten compliance frameworks.
Run Real AWS Lambda on Your Laptop
Deploy and run Python and Node.js functions locally with LocalEmu, executed inside the official AWS Lambda runtime images. No AWS account, no credentials, no cost.
Meet LocalEmu, the Free Successor to LocalStack
An open-source AWS emulator for your laptop. No account, no token. LocalEmu is a maintained fork of the archived LocalStack Community edition, kept free and open under Apache 2.0.
Building an EC2 Security Scanner: 46 Checks, 137 Controls, Zero Excuses
Part 2 of 3 in the EC2 Security Series. One open-source command that scores every EC2 instance 0-100 across 46 checks and maps each finding to 137 controls in 10 compliance frameworks.
Run AI Locally for AWS Security Work: The Complete Ollama Guide
Stop sending your IAM policies, CloudTrail logs, and infrastructure code to third-party APIs. Run LLMs locally with Ollama on Apple Silicon: private, offline, fast. Complete setup guide with AWS security use cases.
Building an S3 Security Scanner: From Frustration to Open Source
Part 3 of the S3 Security Series. Learn about the open-source S3 Security Scanner tool that automates 22 security checks, DNS takeover detection, and bucket discovery.
I Just Became an AWS Community Builder ... And I Owe It to You
A thank you to my readers, and a call to support open source AWS tools.
AWS Security Cards: Free Offensive Security Reference for 60 AWS Services
Free, open-source security reference cards covering attack vectors, misconfigurations, enumeration commands, privilege escalation, persistence, detection, and defense for 60 AWS services.
iam-to-english: Read Any AWS IAM Policy in Plain English and Catch Privilege Escalation Before It Ships
KloudSec releases iam-to-english, a free open-source CLI that explains AWS IAM policies in plain English, flags 21 known privilege escalation paths, including combinations spread across statements, diffs policy changes and gates CI. It runs offline.
awsmap v1.9.0: Scan Your Entire AWS Organization in One Command
awsmap v1.9.0 adds awsmap org: one profile, every account of your AWS Organization, read-only sessions, and an explicit report of what it could not read.
cloudstorm: Load Testing From Many AWS Regions With One Command Line
cloudstorm is a free, open-source CLI that runs Locust, k6, JMeter or Artillery on EC2 instances in several AWS regions, merges the results into one report, and cleans up after itself.
Need Help with AWS Security?
Our AWS security experts can help you implement best practices across all these topics.
Contact Us