Category: AWS Examples
Practical AWS SDK for JavaScript v3 scripts for costs, S3, IAM, EC2, Lambda, Route 53 and CloudFront.
-
Find Public SNS Topics and SQS Queues
A read-only AWS SDK v3 script that checks every SNS topic and SQS queue policy for wildcard principals that no condition narrows down.
-
Find Unused Secrets Manager Secrets
A TypeScript AWS SDK v3 script that lists secrets nobody has retrieved in 90 days and schedules deletion with a recovery window only when…
-
Find KMS Keys Without Automatic Rotation and Enable It
A TypeScript AWS SDK v3 script that reports KMS keys without automatic rotation in every Region and enables it only when you pass –apply.
-
Find IAM Roles Trusted by External AWS Accounts
A read-only AWS SDK v3 script that audits every IAM role trust policy for other AWS accounts, wildcard principals and OIDC trust without a…
-
Find S3 Buckets That Still Use ACLs and Disable Them
A TypeScript AWS SDK v3 script that reports each bucket’s Object Ownership setting and ACL grants, and sets Bucket owner enforced only where it’s…
-
Check Savings Plans Coverage and Utilization
A read-only TypeScript script that reports Savings Plans coverage, uncovered On-Demand spend by service and utilization from the Cost Explorer API.
-
Find Idle ElastiCache Clusters
A read-only TypeScript script that finds ElastiCache clusters and serverless caches with no reads or writes in 14 days, with node prices to size…
-
Find EC2 Instances With Public IP Addresses
A read-only TypeScript script that lists EC2 instances with public IPv4 or IPv6 addresses, the subnet setting behind them and any world-open ports.
-
Find S3 Buckets Whose Policy Doesn’t Require HTTPS
A TypeScript AWS SDK v3 script that finds S3 buckets accepting plain HTTP and, with –apply, adds a Deny on aws:SecureTransport to the existing…
-
Find EKS Clusters With a Public API Endpoint
A read-only TypeScript AWS SDK v3 script that lists every EKS cluster whose Kubernetes API server endpoint is reachable from the internet, and from…
