Lambda Hackathon 2025: Serverless IAM guard with detection and remediation

🛡️ IAM Policy Guard

Serverless IAM Security with Detection & Remediation

AI-powered protection that detects dangerous IAM changes and fixes them automatically within seconds.

18s Average Remediation
120 AWS Resources
Low Cost Monthly Usage
▶ Watch Demo

🎯 What It Does

🔍

Real-time Monitoring

Watches every IAM policy change via CloudTrail

🧠

AI Risk Analysis

Claude 3 Sonnet explains threats in plain language

Auto Remediation

Removes dangerous policies within seconds

📊

Multi-Channel Alerts

Slack, email, and dashboard notifications

🏗️ Architecture Flow

📋
CloudTrail
🔍
Detector
📨
SQS Queue
🔧
Remediator
🔔
Alerts

⚡ Complete Loop: 18 seconds average

  • 🔴 Detect: CloudTrail + Lambda scan IAM changes
  • 📨 Queue: SQS stores violations for processing
  • 🔧 Fix: Remediator Lambda detaches policies
  • 📡 Status: EventBridge publishes results
  • 🔔 Alert: Slack + SNS notify teams

📊 Real-time CloudWatch Dashboard

CloudWatch Dashboard showing IAM Policy Guard metrics
Live metrics and performance monitoring

🤖 AI-Generated Assets

🎨 Project Header - Generated by AI

AI-Generated IAM Policy Guard Header Banner
Generated with DALL-E 3
Prompt: header-image-prompt.md

🛠️ Creation Process

  • 📝 Detailed Prompt Engineering - Comprehensive visual specifications
  • 🎯 Typo Corrections - Fixed "GitHub" and "Terraform" spelling
  • ⚖️ 3:2 Aspect Ratio - Optimized for professional presentation
  • 🎨 AWS Color Palette - Brand-consistent design (#232f3e, #ff9900)

📸 Sample Notifications

💬 Slack Notifications

Slack violation detected
Violation Detected
Slack remediation completed
Remediation Completed

📧 Email Notifications

Email violation detected
Detailed Incident Report
Email remediation completed
Complete Audit Trail

🚀 Quick Deployment

1

Clone Repository

git clone https://github.com/jajera/hackathon-2025-iam-policy-guard.git
2

Configure Variables

alert_email = "security@company.com"
slack_webhook_url = "https://hooks.slack.com/..."
3

Deploy Infrastructure

terraform init && terraform apply

✅ Expected Result: 120 AWS resources deployed

Your IAM Policy Guard is ready to protect your AWS environment!

View on GitHub →
1 / 5