Security Group Audit — Find Unrestricted Inbound Rules (0.0.0.0/0)
Python script to audit all VPC Security Groups, identify rules that expose sensitive ports to the internet, and optionally auto-remediate …
Jan 20, 2025
Read more
Compliance
5 articles
S3 Bucket Security Audit — Public Access, Versioning & Encryption
Python script to audit all S3 buckets for public access exposure, disabled versioning, missing encryption, and access logging gaps — with a …
Jan 20, 2025
Read more
Design an IAM Strategy for a 500-Engineer Organization With SOC2 & PCI-DSS Compliance
Build an enterprise IAM framework covering multi-account structure, SSO federation, permission boundaries, break-glass access, and SCPs for …
Jan 20, 2025
Read more
Find Untagged Long-Running EC2 Instances & Alert via SES
Python script to find EC2 instances running for more than 7 days without a Project tag and send a compliance alert email using AWS SES.
Jan 20, 2025
Read more
Design an IAM Strategy for a 500-Engineer Organization With SOC2 & PCI-DSS Compliance
Build an enterprise IAM framework covering multi-account structure, SSO federation, permission boundaries, break-glass access, and SCPs for …
Jan 20, 2025
Read more