Tagged aws

Host Model Context Protocol servers on AWS Lambda with the Serverless Framework

Run untrusted or per-session code in isolated AWS Lambda MicroVM sandboxes

Run agent-browser on AWS Bedrock AgentCore cloud browsers with AWS credentials

Cut cloud spend across AWS, Azure, GCP and OCI through rightsizing and tagging

Design multi-cloud systems across AWS, Azure, GCP and OCI to avoid lock-in

Manage CI/CD secrets with Vault, AWS Secrets Manager and rotation

Build reusable Terraform modules for AWS, Azure, GCP and OCI infrastructure

Deploy tRPC on AWS Lambda behind API Gateway, Function URLs and response streaming

Set up an AWS CDK project in Python and deploy it to AWS

Investigate AWS incidents with CloudWatch Logs Insights queries and alarm correlation

Find AWS cost savings in IaC and live resources and file GitHub issues for them

Diagnose AWS resource health from CloudWatch logs and metrics and plan fixes

Ask natural-language questions about AWS resources through strictly read-only queries

Review AWS infrastructure against Well-Architected and file improvement issues

Audit AWS S3 bucket policies, ACLs and encryption to find public or overly open buckets

Audit AWS, Azure and GCP accounts against CIS benchmarks using Prowler and ScoutSuite

Contain and investigate incidents in AWS, Azure and GCP using cloud-native audit logs

Run authorized penetration tests against AWS, Azure and GCP with Pacu and ScoutSuite

Set up AWS Verified Access for VPN-less zero trust access to internal apps

Deploy canary IAM keys, decoy buckets and honey resources across AWS, Azure and GCP

Plant Canarytokens for honey credentials, DNS and AWS keys that alert when touched

Flag unusual AWS API calls in CloudTrail with boto3 baselines and behavior analysis

Scan repos, CI pipelines and git history for leaked AWS keys with TruffleHog

Automate GuardDuty finding response with EventBridge and Lambda to quarantine resources

Find AWS IAM privilege escalation paths in policies with boto3 and Cloudsplaining

Spot SQL injection campaigns in ModSecurity, AWS WAF and Cloudflare logs

Map AWS and Azure attack paths with read-only CloudFox enumeration

Run the Pacu framework for AWS privilege escalation scans and IAM enumeration

Enforce auth, throttling, request validation and TLS at Kong, AWS or Apigee gateways

Run AWS Config rules for continuous CIS and PCI checks with SSM auto-remediation

Set AWS IAM permission boundaries that cap what delegated roles can grant

Set up Amazon Macie to find PII and credentials in S3 buckets and automate alerts

Build Nitro Enclaves with attestation-aware KMS policies to process secrets in isolation

Deploy AWS Security Hub to aggregate findings and automate remediation across accounts

Roll out Security Hub across AWS Organizations with CIS and PCI standards

Plant DNS, HTTP and AWS key canary tokens that alert on network intrusion

Query CloudTrail with Athena and Logs Insights to spot unauthorized AWS API activity

Find cloud misconfigurations and vulnerabilities across AWS, Azure and GCP with CSPM scans

Tune AWS WAF, Azure WAF and Cloudflare rules to block injection and bad bots

Encrypt data with local data keys wrapped by AWS KMS keys in envelope encryption

Issue short-lived database, AWS and PKI credentials from Vault dynamic secret engines

Plant fake AWS keys, DNS canaries and document beacons to flag attacker access

Scan Terraform, CloudFormation, Kubernetes and Helm with Checkov, tfsec and KICS

Apply NIST SP 800-207 zero trust across AWS, Azure and GCP with identity-centric access

Run ScoutSuite read-only against an AWS account to map misconfigurations in an HTML report

Find IAM misconfigurations that let users escalate privileges with Pacu and CloudFox

Load AWS, GCP and Azure assets into Neo4j with Cartography to map IAM and trust paths

Snapshot cloud volumes and preserve native logs for AWS, Azure and GCP breach cases

Rebuild attacker timelines from CloudTrail with LookupEvents or Athena queries