Lambda Guard | AWS Serverless Security Free Download – Google Drive Links

 LambdaGuard

68747470733a2f2f696d672e736869656c64732e696f2f707970692f762f4c616d62646147756172642e737667
badge
68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6973737565732f536b797363616e6e65722f4c616d6264614775617264
68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6973737565732d70722f536b797363616e6e65722f4c616d6264614775617264
68747470733a2f2f696d672e736869656c64732e696f2f707970692f646d2f4c616d6264614775617264

AWS Lambda is an event-driven, serverless computing platform provided by Amazon Web Services. It is a computing service that runs code in response to events and automatically manages the computing resources required by that code.

LambdaGuard is an AWS Lambda auditing tool designed to create asset visibility and provide actionable results. It provides a meaningful overview in terms of statistical analysis, AWS service dependencies and configuration checks from the security perspective.

Requirements

  • Python 3.6+
  • Java 11 (optional for SonarQube)

Install

From PyPI

pip3 install lambdaguard 

From Github

git clone https://github.com/Skyscanner/lambdaguard cd lambdaguard sudo make install 

AWS Access

You will need a set of AWS access keys and permissions to run LambdaGuard.

make aws 

Create a profile in ~/.aws/credentials with the newly created keys.

[LambdaGuardProfile] aws_access_key_id = ... aws_secret_access_key = ... 

Alternatively, you can use the keys directly as CLI arguments (not recommended).

Run

  • lambdaguard --help
  • lambdaguard --function arn:aws:lambda:function
  • lambdaguard --input function-arns.txt
  • lambdaguard --output /tmp/lambdaguard
  • lambdaguard --profile LambdaGuardProfile
  • lambdaguard --keys ACCESS_KEY_ID SECRET_ACCESS_KEY
  • lambdaguard --region eu-west-1
  • lambdaguard --verbose

SonarQube: Static Code Analysis

Download sonar-scanner-cli

Build SonarQube

  • make sonarqube

Use SonarQube

  • lambdaguard --sonarqube config.json

Config should have the following format:

{ “command”: “sonar-scanner -X”, “url”: “http://localhost:9000”, “login”: “admin”, “password”: “admin” }

Development

make -B clean make dev . dev/bin/activate make install-dev make test 

GitHub:

faviconGitHub

LambdaGuard

GitHub – Skyscanner/LambdaGuard: AWS Serverless Security 6

AWS Serverless Security. Contribute to Skyscanner/LambdaGuard development by creating an account on GitHub.

Leave a Reply

Your email address will not be published.