cloudtrail

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Prowler is an Open Source security tool to perform cloud security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 240 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.

The open-source data integration platform for security and infrastructure teams

AWS Auditing & Hardening Tool

A command-line tool to get valuable information out of AWS CloudTrail

Terraform module for creating alarms for tracking important changes and occurrences from cloudtrail.

Deploy an high available K3s cluster on Amazon AWS

Several bundled Graylog plugins to integrate with different AWS services like CloudTrail and FlowLogs.

A serverless, event-driven AWS configuration collection service with configuration versioning.

Terraform module to provision an AWS CloudTrail and an encrypted S3 bucket with versioning to store CloudTrail logs

Retrospectively tag AWS resources so you can work out who created them

Parse AWS CloudTrail events and send alerts to Slack for events that match pre-configured rules

A command line utility that allows you to stream data from multiple S3 objects directly into your terminal

AWS support tickets aggregation service

S3 bucket with built in IAM policy to allow CloudTrail logs

Advanced AWS Security Automation Resources: Used by Udemy Course 🎓

Cloudtrail Log Analytics using Amazon Elasticsearch Service - AWS Serverless Application

Easily export AWS CloudTrail events to ElasticSearch

Serverless Platform for Enhanced Insights from CloudTrail Logs

SVS402 - Examples from re:Invent 2020 presentation by James Beswick (@jbesw).