https://github.com/chrnorm/build-your-own-cloudtrail

https://github.com/chrnorm/build-your-own-cloudtrail

Last synced: about 1 month ago
JSON representation

• Host: GitHub
• URL: https://github.com/chrnorm/build-your-own-cloudtrail
• Owner: chrnorm
• License: mit
• Created: 2024-09-09T12:23:44.000Z (5 months ago)
• Default Branch: main
• Last Pushed: 2024-09-17T09:44:58.000Z (5 months ago)
• Last Synced: 2024-09-23T21:04:55.762Z (5 months ago)
• Language: TypeScript
• Size: 4.43 MB
• Stars: 2
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-github-repos - chrnorm/build-your-own-cloudtrail - (TypeScript)

README

        
# build-your-own-cloudtrail

![Events screenshot](docs/events-screenshot.png)

An example repository detailing how to use Cedar to secure your services running in the cloud, complete with your own CloudTrail-style authorization audit log. Presented at [fwd:cloudsec EU 2024](https://fwdcloudsec.org/conference/europe/).

The example cloud workload being secured is a receipt tracing application.

![Receipt tracker screenshot](docs/receipt-app.png)

## Running Locally

To run this example you'll need NodeJS, [pnpm](https://pnpm.io/installation) and Go installed on your machine.

Run the Control Plane API:

```bash

go run cmd/server/main.go

```

Run the Control Plane web interface:

```bash

cd admin

pnpm run dev

```

Run the Receipt App API:

```bash

go run cmd/receiptapp/main.go

```

Run the Receipt App UI:

```bash

cd web

pnpm run dev

```

The Control Plane will be available at http://localhost:3002, and the Receipt App will be available at http://localhost:5173.

## Edit Cedar Policies

Visit http://localhost:3002/ to edit Cedar policies. The Control Plane UI will show the impact of your authorization changes.

![Policy editor screenshot](docs/policy-screenshot.png)