Discover stelligent/amz-linux-hardening Open Source project

A full-stack DevOps on AWS framework

1,253

973

cloudformation_templates

AWS - CloudFormation Templates

Command line tool to validate configuration files

571

config-lint

HCL

193

devops-essentials

Source code samples for DevOps Essentials on AWS Complete Video Course

Simple dashboard for pipelines on AWS

161

pipeline-dashboard

155

cloudformation-custom-resources

Sample app to demonstrate a working pipeline using Infrastructure as Code and AWS Code Services

122

dromedary

Templates and code for Stelligent U lessons

106

stelligent-u

Sagemaker pipeline for AWS Summit New York

sagemaker-pipeline

devopsinthecloud

Scripts and other utilities we commonly use

stelligent_commons

A continuous security pipeline demo for the AWS DevSecOps Workshop.

aws-devsecops-workshop

cfn-LEAst-Privilege-ROle-Generator: Experimental tool for generating least privileged IAM roles for CloudFormation and Service Catalog Launch Constraints.

cfn-leaprog

Dromedary...without servers.

dromedary-serverless

Some serverspec resources to allow testing AWS resources. This repository is deprecated - you should instead use: https://github.com/k1LoW/awspec

serverspec-aws-resources

Sample microservice built with Spring Boot to manage bananas. 🍌

microservice-exemplar

Repo formerly known as mu-cdk. A.K.A Mu2. Pronounced: mew-tah-toe

mutato

TypeScript

config-rule-status

A project to create AWS Config Rules and use them to test AWS Resource compliance.

example of running skaffold on an aws eks cluster

skaffold_on_aws

Demo project for Continuous Integration - from the book Continuous Integration (Duvall, et. al)

continuous_integration_example

XSLT

opendelivery_platform

Open platform for CD

If I have to stand up a Jenkins server ONE MORE TIME, I'm going to turn this car around!

tophat

Setup Asgard in ten minutes using a CloudFormation and Chef.

asgard-in-the-cloud

Potemkin is a decorator to setup initial conditions for a boto "integration test" with real AWS services via CloudFormation, and to tear them down as well.

potemkin-decorator

Secure storage of secrets using Amazon Web Services

keystore

Utility for storing objects in S3 while taking advantage of client side envelope encryption with KMS

crossing

Demo CodePipeline for building and publishing AMIs with Packer

packer-ami-pipeline

Lambda function to run cfn_nag in CodePipeline

cfn-nag-pipeline

stelligent_pipelines

CI/CD pipelines

Utility for storing objects in S3 while taking advantage of client side envelope encryption with KMS

crossing-go

aws-anchore-engine-scanner

This guide details steps and procedures you can follow to create, launch and implement your own standalone container scanning solution within AWS ecosystem. This approach uses an opensource container scanning tool called Anchore Engine as a proof-of-concept and provides examples of how Anchore integrates with your favorite CI/CD systems orchestration platforms.

Minimal helpers for automating CloudFormation pipelines with ruby

minimal-pipeline-gem

Examples of testing with python related to AWS boto3 use

python-testing

Build tools for OWASP Zed Attack Proxy

zap

Rails App for AWS Policy Management and Cleanup

cloudpatrol

An object model for CloudFormation templates

cfn-model

Control Cloudformation lifecycle

cfnctl

A pipeline plugin to get the AWS Inspector findings from AWS Resources

inspector-status

stelligent_demo

templates for creating a full privilege group and a read only group, as well as a script for moving non-mfa'd users from the privileged group to the read only group

aws_group_policy

aws-inspector-quickstart

test-platform

AWS Emergency Compromise Response

cfn_nag_examples

lockdown

Automation for generating an OpenVPN AMI

openvpn-ami

RSpec helper for doing AWS SDK integration testing

aws-int-test-rspec-helper

Cookbooks for spinning up a Jenkins Server for the Honolulu Answers application

ciexample_jenkins

honolulu_jenkins_cookbooks

A collection of cookbooks used to set up a Jenkins server

jenkins_chef_cookbooks

Creating an empty stack in cloudformation to reduce the errors on creation.

empty-stack

YAML query, tool for querying YAML from the command line

mu-cloud9

mu extension for AWS Cloud9

vpc-with-client-vpn

Using Access Based Access Controls (Tags) in AWS to create Developer Sandboxes for EC2.

developer-sandboxes

Example mini-app to use during interview process.

stellitime-api

Exposes cfn-nag as a service through a Lambda/APIGW or Docker image

cfn-nag-service

Demo of CloudFormation Drift Detection

drifter

Cloudformation template, startup script, OpsWorks repo for setting up a production account VPC + Jenkins instance

stelligent_jenkins_cookbooks

Example project for Cloud Custodian deployment using CloudFormation

cloud-custodian-example

cumulogenesis

nando_automation_demo

Sample repository to demonstrate using cfn_nag in CodePipeline

sample-pipeline-with-cfn-nag

Makefile

deploy-button

functions and templates to have a deploy button for your code pipeline

POC for automating Habitat with AWS CodePipeline

hab-demo-pipeline

A collection of utility VMs defined in a Vagrantfile

utility-vagrants

Data store for pipeline instance metadata. Nothing to do with hamburgers. Sorry.

hamburgerstore

jenkins-factory

Sample microservice for mu Edit Add topics

banana-service

Demonstrates the use of AWS Stubs for the Ruby v2 SDK

aws-stubs-intro

This is Stelligent's open source Jenkins server setup. It only have a few Jenkins-server-maintenance jobs, but is designed to be easily extended to create a pipeline for your application.

devopsinthecloudpuppet

Puppet

jenkins_cookbooks

mu extension for adding cfn_nag to your pipeline

mu-cfn_nag

serverless-synchronous-resource-plugin

Serverless plugin for deploying custom CFN stacks

mu-extension-example

docker-api-ecr-sample

Shows an example how to use the AWS Parameter Store Service

parameter-store-example

mu extension for Stelligent's Pipeline Dashboard

devopsinthecloudjenkins

mu-pipeline-dashboard

mu-elasticsearch

mu-minimal-ec2

Continuous Delivery for Microservices on EC2 with mu

Experimenting with the notion of complexity metrics for IAM policy documents

iam_complexity_metrics

An example of how to integrate Trend Micro Deep Security Smart Check with AWS CodePipeline

aws-trend-micro-dssc

Makefile

dns-test

Testing multi-account public hosted zones

command line documentation for cloud formation resources

cfn-man

MySQL-Vault

Useful resources from the bench

BenchOps-Resources

homebrew-tap

This is Stelligent's homebrew tap. Formulas should go in here.

mu-workshop-lab1

Lab for learning mu

lz-lambdas

Landing Zone Lambda Code

iot-pipeline

Lambda and example terraform to demo automation of elastic volume live modifications

elastic-volumes-lambda

HCL

mu-workshop-lab2

Lab for learning mu

jenkins-worker-base

Provide a base docker image for jenkins workers

Mu implementation with Sinatra 'Hello World' app and CasperJS acceptance testing.

munatra

opendelivery_jenkins

mu-workshop-lab3

Lab for learning mu

cfn-nag-rule-repository-complete

A simple chat application for demo purposes

chat-app

CSS

100

s3-archive-delete

Archive and delete contents of an S3 bucket so it can then be deleted itself