Category: AWS Examples
Practical AWS SDK for JavaScript v3 scripts for costs, S3, IAM, EC2, Lambda, Route 53 and CloudFront.
-
Find RDS Databases Without Deletion Protection
A TypeScript AWS SDK v3 script that lists RDS instances and clusters without deletion protection and turns it on safely with –apply.
-
Find Unencrypted RDS Instances and Aurora Clusters
A report-only AWS SDK v3 script that finds unencrypted RDS databases, shows the KMS key type behind the rest and flags disabled keys.
-
Find CloudFront Distributions Where AWS WAF Is Not Enabled
A report-only AWS SDK v3 script that lists CloudFront distributions without an AWS WAF web ACL, flags count-only and WAF Classic ACLs, and checks…
-
Find EBS Volumes Without a Recent Snapshot
A report-only TypeScript script that finds in-use EBS volumes with no recent snapshot, AWS Backup recovery point or lifecycle policy covering them.
-
Migrate Launch Configurations to Launch Templates in Auto Scaling
A report-only TypeScript script that finds Auto Scaling groups on launch configurations and drafts a launch template for each, plus the migration steps.
-
Find and Delete Unused CloudWatch Dashboards
A TypeScript script that scores every CloudWatch dashboard by dead metrics, last change and last view, prices it and deletes the unused ones behind…
-
Find Unused DynamoDB Tables With No Reads or Writes
A report-only AWS SDK v3 script that finds DynamoDB tables with no reads or writes over 30 days and estimates the storage and capacity…
-
Find Unused EC2 Key Pairs in Every Region
An AWS SDK v3 script that finds EC2 key pairs no instance, launch template or launch configuration uses, and deletes old ones only with…
-
Check IAM Access Analyzer in All Regions and List Findings
An AWS SDK v3 script that lists IAM Access Analyzer analyzers in every Region, summarizes active findings and can create the free external access…
-
Check Security Hub Is Enabled in Every AWS Region
An AWS SDK v3 script that reports Security Hub CSPM, its standards and cross-Region aggregation in every Region, and can enable it where it’s…
