Category: AWS Examples
Practical AWS SDK for JavaScript v3 scripts for costs, S3, IAM, EC2, Lambda, Route 53 and CloudFront.
-
Detect CloudFormation Drift Across All Stacks
A read-only TypeScript script that runs drift detection on every CloudFormation stack, lists changed properties and counts resources it can’t check.
-
Find ECR Repositories Without Image Scanning and Enable It
A TypeScript AWS SDK v3 script that reports ECR scanning per repository with the newest image’s findings, and adds a registry scanning rule with…
-
Find API Gateway Stages Without Access Logging
An AWS SDK v3 script that reports access logs, execution logs, data tracing and X-Ray on every API Gateway stage, and enables access logs…
-
Find API Gateway Methods Without Authorization
A read-only AWS SDK v3 script that lists REST methods and HTTP and WebSocket routes with no authorizer, weighed against API keys and resource…
-
Find IAM Users With Directly Attached Policies
A read-only AWS SDK v3 script that lists IAM users with managed or inline policies attached to the user, with their groups and candidate…
-
Check the AWS Root User for MFA and Access Keys
A read-only AWS SDK v3 script that reports root user MFA, root access keys, signing certificates and recent root sign-ins for one account.
-
Compare EC2 Spot Price History Across Availability Zones
A read-only TypeScript script that averages 90 days of EC2 Spot prices per Availability Zone and compares the cheapest zone with On-Demand.
-

Find and Delete Default VPCs You Aren’t Using
A TypeScript script that finds default VPCs in every Region, lists what still uses them and deletes only the empty ones behind –apply.
-
Find VPCs Without Flow Logs
A TypeScript script that reports VPC flow log coverage per Region, flags failing delivery and can create Parquet flow logs to S3 behind –apply.
-
Find Public AMIs You’ve Shared by Mistake
A TypeScript AWS SDK v3 script that finds your public and shared AMIs, reports block public access per Region and makes AMIs private only…