Kali Linux

LambdaGuard : AWS Serverless Security

LambdaGuard is an event-driven, serverless computing platform provided by Amazon Web Services. It is a computing service that runs code in response to events and automatically manages the computing resources required by that code.

LambdaGuard is an AWS Lambda auditing tool designed to create asset visibility and provide actionable results. It provides a meaningful overview in terms of statistical analysis, AWS service dependencies and configuration checks from the security perspective.

Requirements

  • Python 3.6+
  • Java 11 (optional for SonarQube)

Install

From PyPI

pip3 install lambdaguard

From Github

git clone https://github.com/Skyscanner/lambdaguard
cd lambdaguard
sudo make install

AWS Access

You will need a set of AWS access keys and permissions to run LambdaGuard.

make aws

Run

  • lambdaguard --help
  • lambdaguard --function arn:aws:lambda:function
  • lambdaguard --input function-arns.txt
  • lambdaguard --output /tmp/lambdaguard
  • lambdaguard --profile LambdaGuardProfile
  • lambdaguard --keys ACCESS_KEY_ID SECRET_ACCESS_KEY
  • lambdaguard --region eu-west-1
  • lambdaguard --verbose

SonarQube: Static Code Analysis

Download sonar-scanner-cli

  • https://github.com/SonarSource/sonar-scanner-cli

Build SonarQube

  • make sonarqube

Use SonarQube

  • lambdaguard --sonarqube config.json

Config should have the following format:

{
“command”: “sonar-scanner -X”,
“url”: “http://localhost:9000”,
“login”: “admin”,
“password”: “admin”
}

Development

make -B clean
make dev
. dev/bin/activate
make install-dev
make test

R K

Recent Posts

Kali Linux Commands Cheat Sheet: Complete Quick Reference

This cheat sheet covers the essential Kali Linux commands every pentester and ethical hacker uses…

6 hours ago

What I Wish I Knew Before Learning Malware Analysis and Reverse Engineering

When I first started learning malware analysis and reverse engineering, I thought the hardest part…

4 days ago

git fetch vs git pull: How They Work and When to Use Each

Both git fetch and git pull talk to a remote repository, but they do very different things to your…

2 weeks ago

git cherry-pick Command: Apply Commits from Another Branch

Sometimes the change you need already exists, just on the wrong branch. A hotfix lands…

2 weeks ago

Best Email APIs for Secure Business Email: Why Developers Are Moving Beyond SMTP

Email is still one of the most important communication channels inside modern applications. Password resets,…

2 weeks ago

Nginx Commands in Linux: Start, Stop, Reload, Test, and Log

Nginx is a high-performance web server and reverse proxy trusted by some of the largest…

3 weeks ago