JavaScript Security Cloud and IaC Audit Bundle
Run a read-only JavaScript and TypeScript security audit focused on cloud, infrastructure-as-code, IAM, network exposure, and storage encryption risks.
This bundle covers cloud, infrastructure-as-code, iam, network exposure, and storage encryption risks.
Included Codemods
- @codemod/audit-public-cloud-network-access-ts@0.1.0
- @codemod/aws-admin-service-ip-allowlist-audit@0.1.0
- @codemod/aws-apigw-auth-required@0.1.0
- @codemod/aws-iam-wildcard-resource-policy@0.1.0
- @codemod/detect-broad-aws-iam-policies-ts@0.1.0
- @codemod/detect-confidential-ai-indexing-flows@0.1.0
- @codemod/detect-notebook-creation-without-kms@0.1.0
- @codemod/detect-opensearch-rest-encryption-ts@0.1.0
- @codemod/detect-public-bucket-grants-ts-code@0.1.0
- @codemod/detect-s3-https-only-policy-gaps@0.1.0
- @codemod/detect-storage-public-access-not-blocked@0.1.0
- @codemod/detect-unencrypted-aws-efs-filesystems@0.1.0
- @codemod/detect-unencrypted-aws-rds-at-rest@0.1.0
- @codemod/detect-unencrypted-block-storage@0.1.0
- @codemod/detect-unencrypted-message-queue-decls@0.1.0
- @codemod/resource-policy-public-access@0.1.0
- @codemod/typescript-aws-iam-wildcard-policy-audit@0.1.0
Coverage
- 17 codemods