LambdaGuard - AWS Serverless Security

AWS Lambda is an event-driven, serverless computing platform provided by Amazon Web Services. It is a computing service that runs code in response to events and automatically manages the computing resources required by that code.

LambdaGuard is an AWS Lambda auditing tool designed to create asset visibility and provide actionable results. It provides a meaningful overview in terms of statistical analysis, AWS service dependencies and configuration checks from the security perspective.

Requirements

Python 3.6+ Java 11 (optional for SonarQube)

Install

From PyPI

From Github

AWS Access

You will need a set of AWS access keys and permissions to run LambdaGuard.

Create a profile in ~/.aws/credentials with the newly created keys.

Alternatively, you can use the keys directly as CLI arguments (not recommended).

Run

lambdaguard --help lambdaguard --function arn:aws:lambda:function lambdaguard --input function-arns.txt lambdaguard --output /tmp/lambdaguard lambdaguard --profile LambdaGuardProfile lambdaguard --keys ACCESS_KEY_ID SECRET_ACCESS_KEY lambdaguard --region eu-west-1 lambdaguard --verbose

SonarQube: Static Code Analysis

Download sonar-scanner-cli

https://github.com/SonarSource/sonar-scanner-cli

Build SonarQube

make sonarqube

Use SonarQube

lambdaguard --sonarqube config.json

Config should have the following format:

Development