CloudGuard — AWS Security Auditor

CloudGuard is an agentic AI security auditor that autonomously scans AWS cloud environments for misconfigurations and security risks. Built with LangChain and the AWS Boto3 SDK, it reasons over API responses to identify vulnerabilities — open S3 buckets, overprivileged IAM roles, unencrypted RDS instances, public EC2 security groups — and generates human-readable remediation reports. The project was inspired by a real-world problem: most AWS accounts, even in production, have misconfigured resources that expose sensitive data. CloudGuard automates the detection work that would take a security engineer hours to do manually.

The Challenge

Cloud misconfiguration is the number one cause of data breaches in AWS environments. Most small teams and startups don't have dedicated security engineers — they rely on developers who may not know every IAM policy edge case or S3 bucket setting. There's a gap for an automated, intelligent tool that can audit an account and explain the risks in plain language.

The Solution

Results & Impact

• Autonomously identifies open S3 buckets before data is exposed
• Flags overprivileged IAM roles with specific policy recommendations
• Detects unencrypted databases and storage volumes
• Generates plain-language remediation reports for non-technical stakeholders
• Terraform baseline deploys a secured environment in under 5 minutes

Project Gallery