AWS SAM
Analyse the configuration of your AWS Serverless Application Model files.
VISUALIZE | UNDERSTAND | SECURE
Develop Faster, Better, More Secure Serverless-Applications
Visualize, analyze and secure the Resources and Data-Flows
of your Serverless Code with every change.
> Automated AWS Resource Diagrams
Visualize your Infrastructure & Data Flow
Get an overview of which JSON objects and data your AWS resources exchange. CodesShield generates easy to understand architecture diagrams directly from your SAM, CloudFormation files and source code.
Use them to easily troubleshoot API and security issues, verify your implementation or visualize your architecture for QA and audits.
To provide detailed insights, CodeShield applies static-analysis to track the data flow between your Serverless functions and the cloud infrastructure.
user:~$ OWASP SAS-10 Security Analysis
Follow the Data within your AWS Infrastructure - Across Events, Lambdas, and Tables.
Know your sensitive data-flows better than your attacker. Detect event-data injections during development.
CodeShield discovers OWASP SAS-10 vulnerabilities even if they span across multiple functions. Vulnerabilities are visualized in your architecture and your code.
Open-Source Security_
Manage your Open-Source Dependencies
Get informed about known vulnerabilities in used open-source software immediately.
CodeShield detects known vulnerabilities (CVEs) in the used open-source software, assesses their risk, and suggests updates.
Leverage your Technologies
AWS CloudFormation
Analyse the configuration of your AWS CloudFormation files.
Java
Run code analysis on your Java source-/bytecode.
Node.js
Run code analysis on your node.js code.
GitHub
Integrate with GitHub.
Recent Posts
This article is part two of a series on how to prevent code injection attacks against Serverless applications using AWS Web application firewalls.
This article is part one of a series on how to prevent code injection attacks against Serverless applications using AWS Web application firewalls.
We released an Java adaption of the OWASP Serverless Goat in our GitHub Repo.
In this article, we explain the myth behind false positives and discuss two types of false positives.
