Security & Operation

This project aims to cover SecOps for AWS Lambda serverless first. To use this package, install it as a global comand line tool:

npm install -g simplify-secops

Define a function list in CSV format:

Region,Account,FunctionName,Version,LogRetention,KMS,SecureFunction,SecureLog
eu-west-1,123456789012,test-function-kms,,90,1,TRUE,FALSE

Command Line Support:

• Verify deployed functions against your list of definitions

  • simplify-secops -p simplify-eu verify -i functions.csv --simple

• Record a snapshot with current state of functions

  • simplify-secops -p simplify-eu snapshot -i functions.csv -o .snapshot

• Verify deployed functions with a specified snapshot date

  • simplify-secops -p simplify-eu verify -i functions.csv -b 2020-06-21

• Check deployed functions and functions' parameters

  • simplify-secops -p simplify-eu check -i functions.csv

• Patch deployed functions with functions' parameters

  • simplify-secops -p simplify-eu patch -i functions.csv

• Monitor deployed functions with standard simple view metrics

  eg: options for last 12 hours with sample in every 5 mins (5*60 = 300) seconds

  • simplify-secops -p simplify-eu metric -i functions.csv -t 300 -h 12

  eg: drawing the function data with index=1 and INVOCATIONS (1) as a timeseries chart

  • simplify-secops -p simplify-eu metric -i functions.csv -t 300 -h 12 --plot 1,1

    2.00 ┼╮ 1.95 ┤│ 1.90 ┤│ 1.85 ┤│ 1.80 ┤│ 1.75 ┤│ 1.70 ┤│ 1.65 ┤│ 1.60 ┤│ 1.55 ┤│ 1.50 ┤│ 1.45 ┤│ 1.40 ┤│ 1.35 ┤│ 1.30 ┤│ 1.25 ┤│ 1.20 ┤│ 1.15 ┤│ 1.10 ┤│ 1.05 ┤│ 1.00 ┤╰

  • 1- Invocations BLUE: 3 | 2- Errors RED: 0 | 3- Max Duration GREEN: 938.53 | 4- Max Concurrency YELLOW: 2 | 5- Throttles WHITE: 4

Example of (security) metrics:

| Index | Function | CodeSHA256 | Layers | LogRetention | EncryptionKey | SecureFunction | SecureLog | |-------|--------------------|-------------|--------|--------------|---------------|----------------|-------------| | 1 | test-function-foo | 9AD72= (OK) | 1 (OK) | 90 / 90 (OK) | KMS (OK) | YES (OK) | NO (OK) | | 2 | foo-secret-manager | f4Bfa= (OK) | 1 (OK) | 90 / 90 (OK) | Default (OK) | YES (PATCH) | YES (PATCH) | | 3 | foo-user-manager | bcBa1= (OK) | 1 (OK) | 90 / 90 (OK) | Default (OK) | NO (OK) | NO (OK) |

Example of (operation) metrics:

| Index | Function | Invocations | Errors | Duration | Concurrency | |-------|--------------------------|-------------|---------|-------------|-------------| | 1 | test-function-foo | 120 | 4 | 321.43 | 31 | | 2 | foo-secret-manager | 1 | 0 | 1161.00 | 1 | | 3 | foo-user-manager | 1 | 0 | 938.53 | 1 | | | Statistics in 12 hours | 122 | 4 | 1161.00 | 33 |