This content originally appeared on DEV Community and was authored by DevOps Rite
Hey folks
I’ve been working on a project called InfraGuard – it is a tool that scans your AWS infrastructure and generates JSON & HTML reports with potential misconfigurations.
Right now, it supports:
EC2 Audit (running instances, open ports)
IAM Audit (users, roles, risky permissions)
S3 Audit (bucket policies, public access)
Security Groups & Network ACL Audit
Reports are generated in a clean HTML + JSON format so they can be easily shared, parsed, or plugged into other workflows.
My goal: Make AWS security auditing accessible for individual developers, students, and small startups who cannot afford heavy commercial tools.
Infraguard Page: https://infraguard.me/
I’d love feedback from the community on:
What other AWS resources should be scanned?
Any suggestions to improve the report format?
Would you find a lightweight web dashboard useful?
Any feedback, PRs, or stars are super welcome
This content originally appeared on DEV Community and was authored by DevOps Rite