scalesec Goto Github PK

aws-audit-manager-examples

Sample code for creating custom controls or frameworks within AWS Audit Manager

aws-eventbridge-cis-alarms

Example code for setting up CIS Benchmarks using EventBridge

cloudformation-guard

A set of tools to check AWS CloudFormation templates for policy compliance using a simple, policy-as-code, declarative syntax

fedramp_explorer

fedramp_parser

fedrampup

Gathers AWS inventory and outputs CSV in the format for FedRAMP SSP

gcp-workload-identity-federation

Pypi module to enable workload identity federation from AWS to GCP without the need for static credentials.

gcp_api_key_inventory

Inventory, analyze, and report on your GCP API keys in an automated fashion.

gcp_org_policy_notifier

Be notified in the event of a new GCP Organization Policy being released.

gcp_sa_lister

Crawls your GCP Org and returns service accounts that have not been used in the past 90 days.

gcp_threat_detection_auto_remediation

This repo contains all you need to begin automating Event Threat Detection findings.

nysdfs_23_nycrr_500

Visualization for New York State Cybersecurity Requirements for Financial Services Companies

parliament_role_runner

project_lockdown

GCP Auto Remediation Suite for High Risk Events

samm

scalablevpc

Template that creates a VPC, scaled from 1x1 to 3x3 depending on parameter values.

scalesec-secret-store

Vault Custom Plugin example showing how to create a custom secret store backend. Can be used a framework or starting point to help jumpstart a development effort

shielded-vm-demo

Repository for Shielded VM Demo Blog Post

terraform-example-foundation

Example repo showing how the CFT modules can be composed to build a secure cloud foundation.

terraform_aws_scp

AWS Organizations Service Control Policies (SCPs) written in HashiCorp Terraform.

ubuntu22-cis

Ubuntu 22.04 LTS Ansible role remediations based on CIS Benchmark

valheim-gke-server

Valheim server

vault-assistant

Vault assistant is a quick and easy way to install, configure and run Hashicorp Vault. It provides a dock application to start; stop; seal; unseal and other support functions.

vulnado

Purposely vulnerable Java application to help lead secure coding workshops