SSH-Restricted
SSH-Restricted deploys an SSH compliance rule with auto-remediation via AWS Lambda if SSH access is public.
- SSH-Auto-Restricted checks incoming SSH traffic configurations for security groups using AWS Config rule.
- The rule is COMPLIANT when IP addresses of the incoming SSH traffic in the security groups are restricted (CIDR other than 0.0.0.0/0)
- This rule applies only to IPv4.
- If a security group is changed with SSH traffic CIDR equal to 0.0.0.0/0, the AWS Config rule becomes NON_COMPLIANT
- The NON_COMPLIANT event triggers an Eventbridge rule which triggers an AWS Lambda function that removes the SSH incoming traffic
Architecture diagram of the app.
Deploying the App to AWS Cloud
Install CDK
$ npm install -g aws-cdk
Create Python Virtual Environment
python -m venv .venv
source .venv/bin/activate
Install Python-specific modules
pip install -r requirements.txt
Create Cloudformation from CDK
cdk synth
Deploy
cdk deploy
Useful commands
cdk lslist all stacks in the appcdk synthemits the synthesized CloudFormation templatecdk deploydeploy this stack to your default AWS account/regioncdk diffcompare deployed stack with current statecdk docsopen CDK documentation
Enjoy!
1 Nov 14, 2021
36 Dec 11, 2022
532 Jan 2, 2023
3 Feb 9, 2022
32 Nov 21, 2022
123 Dec 26, 2022
12 Nov 20, 2022
17 Oct 21, 2022
1 Oct 19, 2021
204 Jan 2, 2023
57 Dec 17, 2022
8 Sep 9, 2022
1 May 20, 2022
3 Feb 11, 2022
189 Dec 8, 2022
32 Dec 28, 2022
3 Feb 2, 2022
1.9k Jan 7, 2023
3 Aug 31, 2022