All projects
🔐Work in progress
SentinelCloud
A junior-friendly security monitoring platform for AWS environments.
Overview
SentinelCloud is a work-in-progress cloud security project. It is designed to bring together CloudTrail, GuardDuty and VPC Flow Logs through EventBridge, Lambda and SQS, then pass those events through a small detection engine for review in a Next.js dashboard.
What it does
- Planned detections include repeated failed logins, unusual API calls and root-account activity
- Flags practical configuration risks such as public S3 resources, open SSH security groups and disabled CloudTrail
- Event pipeline planned around CloudTrail, GuardDuty, VPC Flow Logs, EventBridge, Lambda and SQS
- DynamoDB storage for alerts and a Next.js dashboard for security score, severity counts, IAM events, suspicious IPs and public resources
- Scoped as a learning project for useful cloud hygiene signals rather than a claim of advanced threat attribution