https://github.com/benjitrapp/aws-loginguard

Ever wondered who is lurking around in your AWS Account? Get notified if someone strange login activities occured in your AWS Account
https://github.com/benjitrapp/aws-loginguard

aws aws-lambda python3 security

Last synced: about 2 months ago
JSON representation

Ever wondered who is lurking around in your AWS Account? Get notified if someone strange login activities occured in your AWS Account

• Host: GitHub
• URL: https://github.com/benjitrapp/aws-loginguard
• Owner: BenjiTrapp
• Created: 2022-02-04T15:09:22.000Z (over 4 years ago)
• Default Branch: main
• Last Pushed: 2022-03-05T08:50:19.000Z (over 4 years ago)
• Last Synced: 2025-10-08T21:03:17.948Z (9 months ago)
• Topics: aws, aws-lambda, python3, security
• Language: Python
• Homepage:
• Size: 166 KB
• Stars: 2
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

          
[![Python application](https://github.com/BenjiTrapp/AWS-LoginGuard/actions/workflows/python-app.yml/badge.svg)](https://github.com/BenjiTrapp/AWS-LoginGuard/actions/workflows/python-app.yml)

[![CodeQL](https://github.com/BenjiTrapp/AWS-LoginGuard/actions/workflows/codeql-analysis.yml/badge.svg)](https://github.com/BenjiTrapp/AWS-LoginGuard/actions/workflows/codeql-analysis.yml)

[![Pylint](https://github.com/BenjiTrapp/AWS-LoginGuard/actions/workflows/pylint.yml/badge.svg)](https://github.com/BenjiTrapp/AWS-LoginGuard/actions/workflows/pylint.yml)

# AWS-LoginGuard

> Ever wondered who is lurking around in your AWS Account? Get notified if someone strange login activities occured in your AWS Account

If the event `AwsConsoleSignin` get's triggered, the Event Bridge shall trigger a lambda function that gathers some info about "who is logging in" and try to check if it's a Pentester. Most of the guys are forgetting to disguise their user agents. In this first version we stay "detective", in later version also an automatic remediation could be implemented. Let's see how this script evolves :)

![](docs/AWSLoginGuard.png)

### Todo:

1. Make a fancier readme

2. Add a Terraform Script to deploy everything