AWS Serverless Security
-
Updated
Jul 13, 2022 - Python
#
serverless-security
Here are 14 public repositories matching this topic...
awesome resources about cloud native security 🐿
docker kubernetes serverless container cloud-computing k8s cloud-native cloud-security docker-security container-security serverless-security kubernetes-security container-escape cloud-native-security
-
Updated
Nov 4, 2023
A Serverless Security Library for Developers. Regain Control Over Your AWS Lambda & Google Cloud Functions Runtimes.
-
Updated
Oct 29, 2019
source code
-
Updated
Oct 22, 2020 - JavaScript
JavaScript Security Engineering (Helicopter View) workshop, crafted for 3 hours with a bunch of demos
react javascript security vuejs angular typescript vue compiler reactjs helmet svelte web-security cross-origin-resource-sharing firebase-security sveltejs cross-site-scripting serverless-security helmetjs svelte3 javascript-security
-
Updated
Sep 2, 2021 - TypeScript
AWS Lambda runtime application self-protection (RASP). Free and opensource.
-
Updated
May 19, 2024 - Rust
FlareStack is an automated traffic abuse mitigation system built on Cloudflare Workers. It periodically analyzes Cloudflare Analytics data to detect high-frequency or abusive IPs and automatically blocks them using WAF custom lists, helping protect sites from scraping, bots, and request floods.
rate-limiting waf traffic-analysis cloudflare web-security ddos-protection ip-blocking cloudflare-workers serverless-security bot-protection edge-security
-
Updated
Jun 8, 2026 - TypeScript
Serverless security scanning engine for AWS environments. Detects IAM privilege escalation, unauthenticated API exposure, and storage misconfigurations via active abuse simulation — not static checks.
python aws aws-lambda terraform penetration-testing boto3 appsec aws-security privilege-escalation security-automation devsecops security-engineering vulnerability-scanner cloud-security api-security serverless-security s3-security risk-scoring iam-scanner cloud-misconfiguration
-
Updated
Mar 25, 2026 - Python
AdaPol is a research-driven, prototype-grade DevSecOps system designed to **automatically synthesize least-privilege IAM policies** for serverless workloads deployed across **AWS, Azure, and Google Cloud**. The core motivation behind AdaPol is the persistent gap between the *principle of least privilege* and real-world cloud practice.
aws azure terraform iam gcp audit-logs infrastructure-as-code access-control cloudtrail multi-cloud security-automation devsecops cloud-security security-research integer-linear-programming least-privilege policy-optimization serverless-security identity-and-access-management policy-synthesis
-
Updated
May 3, 2026 - Python
🔒 Automate least-privilege IAM policy synthesis for serverless workflows across AWS, Azure, and Google Cloud, ensuring security and compliance in your CI/CD pipelines.
aws terraform iam infrastructure-as-code access-control cloudtrail multi-cloud security-automation devsecops security-research integer-linear-programming least-privilege policy-optimization serverless-security github-config identity-and-access-management policy-synthesis
-
Updated
Oct 12, 2026 - Python
🏗️ Hands-on workshop to secure a serverless AWS application across seven defense-in-depth layers using AI-powered automation. Covers Cognito adaptive auth, WAF edge protection, VPC isolation, Lambda hardening with Kiro, Secrets Manager, DynamoDB encryption, and a Bedrock AI agent for GuardDuty incident response via EventBridge.
aws aws-lambda aws-kms api-gateway dynamodb aws-serverless amazon-cognito cloudtrail data-protection devsecops aws-waf threat-detection aws-secrets-manager serverless-security amazon-guardduty eventbridge amazon-vpc threat-detecting amazon-bedrock amazon-inspector
-
Updated
Apr 27, 2026 - HCL
Production-inspired AWS serverless API security platform using Terraform, API Gateway, Lambda, WAF, API keys, usage plans, CloudWatch, SNS, EventBridge, and advanced alerting.
javascript python aws lambda serverless rest-api terraform alerting cloudwatch iam sns throttling observability serverless-security usage-tracking eventbridge
-
Updated
Jun 4, 2026 - HCL
Enterprise-focused AWS security & networking portfolio featuring Terraform-built hub-and-spoke VPCs, Transit Gateway, firewall-inspected egress, least-privilege IAM, permission boundaries, optional SCPs, GuardDuty/Security Hub threat detection, automated alerting, and secure serverless APIs.
aws networking terraform iam waf cognito infrastructure-as-code soc cloudtrail aws-security devsecops zero-trust security-engineering cloud-security guardduty serverless-security security-hub detection-engineering cloud-networking aws-network-firewall
-
Updated
Oct 13, 2026 - Python
Add this topic to your repo
To associate your repository with the serverless-security topic, visit your repo's landing page and select "manage topics."