LambdaGuard: AWS Lambda auditing tool

by do son ·

AWS Lambda auditing

LambdaGuard

AWS Lambda is an event-driven, serverless computing platform provided by Amazon Web Services. It is a computing service that runs code in response to events and automatically manages the computing resources required by that code.

LambdaGuard is an AWS Lambda auditing tool designed to create asset visibility and provide actionable results. It provides a meaningful overview in terms of statistical analysis, AWS service dependencies, and configuration checks from the security perspective.

Install

Requirements

  • Python 3.6+
  • Java 11 (optional for SonarQube)

From PyPI

pip3 install lambdaguard

From Github

git clone https://github.com/Skyscanner/lambdaguard
cd lambdaguard
sudo make install

AWS Access

You will need a set of AWS access keys and permissions to run LambdaGuard.

make aws

Create a profile in ~/.aws/credentials with the newly created keys.

[LambdaGuardProfile]

aws_access_key_id = ...

aws_secret_access_key = ...

 

Alternatively, you can use the keys directly as CLI arguments (not recommended).

Use

Tutorial

Copyright (C) 2022 Skyscanner

Tags: AWS Lambda auditingLambdaGuard