Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/Skyscanner/LambdaGuard
AWS Serverless Security
https://github.com/Skyscanner/LambdaGuard
aws aws-lambda dynamodb hacking iam kms lambda serverless-security sns sqs
Last synced: about 10 hours ago
JSON representation
AWS Serverless Security
- Host: GitHub
- URL: https://github.com/Skyscanner/LambdaGuard
- Owner: Skyscanner
- License: apache-2.0
- Archived: true
- Created: 2019-04-29T16:00:17.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2022-07-13T13:32:24.000Z (over 2 years ago)
- Last Synced: 2024-05-11T22:21:44.472Z (6 months ago)
- Topics: aws, aws-lambda, dynamodb, hacking, iam, kms, lambda, serverless-security, sns, sqs
- Language: Python
- Homepage:
- Size: 307 KB
- Stars: 400
- Watchers: 13
- Forks: 70
- Open Issues: 7
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
Awesome Lists containing this project
- awesome-cloud-security - Lambda Guard
README
# 
LambdaGuard
[](https://pypi.python.org/pypi/LambdaGuard/)
[](https://github.com/Skyscanner/LambdaGuard/actions)
[](https://github.com/Skyscanner/LambdaGuard/issues)
[](https://github.com/Skyscanner/LambdaGuard/pulls)
[](https://img.shields.io/pypi/dm/LambdaGuard)
AWS Lambda is an event-driven, serverless computing platform provided by Amazon Web Services. It is a computing service that runs code in response to events and automatically manages the computing resources required by that code.
LambdaGuard is an AWS Lambda auditing tool designed to create asset visibility and provide actionable results. It provides a meaningful overview in terms of statistical analysis, AWS service dependencies and configuration checks from the security perspective.
## Requirements
- Python 3.6+
- Java 11 (optional for SonarQube)
## Install
### From PyPI
```
pip3 install lambdaguard
```
### From Github
```
git clone https://github.com/Skyscanner/lambdaguard
cd lambdaguard
sudo make install
```
### AWS Access
You will need a set of AWS access keys and permissions to run LambdaGuard.
```
make aws
```
Create a profile in `~/.aws/credentials` with the newly created keys.
```
[LambdaGuardProfile]
aws_access_key_id = ...
aws_secret_access_key = ...
```
Alternatively, you can use the keys directly as CLI arguments (not recommended).
## Run
- `lambdaguard --help`
- `lambdaguard --function arn:aws:lambda:function`
- `lambdaguard --input function-arns.txt`
- `lambdaguard --output /tmp/lambdaguard`
- `lambdaguard --profile LambdaGuardProfile`
- `lambdaguard --keys ACCESS_KEY_ID SECRET_ACCESS_KEY`
- `lambdaguard --region eu-west-1`
- `lambdaguard --verbose`
## SonarQube: Static Code Analysis
### Download sonar-scanner-cli
- https://github.com/SonarSource/sonar-scanner-cli
### Build SonarQube
- `make sonarqube`
### Use SonarQube
- `lambdaguard --sonarqube config.json`
Config should have the following format:
```json
{
"command": "sonar-scanner -X",
"url": "http://localhost:9000",
"login": "admin",
"password": "admin"
}
```
## Development
```
make -B clean
make dev
. dev/bin/activate
make install-dev
make test
```