Example solutions demonstrating how to implement patterns within the AWS Security Reference Architecture guide using CloudFormation (including Customizations for AWS Control Tower) and Terraform.

Runs checks to see if an EKS cluster follows EKS Best Practices.

The AWS Secure Environment Accelerator is a tool designed to help deploy and operate secure multi-account, multi-region AWS environments on an ongoing basis. The power of the solution is the config…

This repository provides sample templates for security playbooks against various scenarios when using Amazon Web Services.

Baseline Environment on AWS(BLEA) is a set of reference CDK template to establish secure baseline on standalone-account or ControlTower based multi-account AWS environment. This solution provides b…

Code examples for the AWS Security Blog post: How to use CI/CD to deploy and configure AWS security services with Terraform

AHA is an incident management & communication framework to provide real-time alert customers when there are active AWS event(s). For customers with AWS Organizations, customers can get aggregated a…

This application bootstraps everything needed to query the AWS Cost and Usage reports through Amazon Athena. It also includes reference data and preconfigured SQL queries.

Example AWS Service control policies to get started or mature your usage of AWS SCPs.

Example policies demonstrating how to implement a data perimeter on AWS.

This repository contains a sample IAM permissions boundary as a starting point for creating your own permissions boundary to meet the security needs of your organization. The IAM permissions bound…

Learn more about Amazon EventBridge resource policies and multi-account event bus topologies. This repo contains sample code for the AWS re:Invent 2020 session "Building event-driven applications w…

Command Line Interface tool for Cloud Intelligence Dashboards deployment

Deploy Service Control Policies (SCPs) with Terraform

A Python CLI application that demonstrates how you can access AWS services, such as Amazon S3 and Amazon Athena, using trusted identity propagation.

Manage AWS IAM Identity Center permission sets and account assignments with Terraform.

This repository contains examples for customers to get started using the Amazon Bedrock Service. This contains examples for all available foundational models