AWS Security Automation

Collection of tools, techniques & automations for defending AWS platforms at scale. Everything here has been built and run in production across multi-account AWS Organizations.

Each project is open-source with full CDK deployment code. The foundation for cross-account automation is Fleet Access — a hub-spoke IAM role structure that most of these tools depend on.