/serverless-puresec-cli

Serverless plugin for least privileges.

Primary LanguageJavaScriptOtherNOASSERTION

serverless-puresec-cli

serverless npm version

Website • Newsletter • Slack • Twitter

Serverless plugin for PureSec CLI.

Features

  • Saves you time - magically creates IAM roles for you
  • Reduces the attack surface of your AWS Lambda based application
  • Helps creating least privileged roles with the minimum required permissions
  • Currently supported runtimes: Node.js (more runtimes coming soon...)
  • Currently supported services: DynamoDB, Kinesis, KMS, S3, SES, SNS & Step Functions
  • Works with the Serverless Framework

Quick Start

1. Install via npm:

npm install --save-dev serverless-puresec-cli

2. Add serverless-puresec-cli to your serverless.yml:

In your project's serverless.yml file add the following entry to the plugins section: serverless-puresec-cli. If there is no plugin section you will need to add it to the file.

It should look similar to this:

plugins:
  - serverless-puresec-cli

3. Validate:

You can check wether you have successfully installed the plugin by running the serverless command line.

serverless

the console should display puresec as one of the plugins now available in your Serverless project.

4. Start using serverless-puresec-cli:

Generate roles for your entire project.

serverless puresec gen-roles

The tool will ask you a few questions and then do its best to generate least privileged IAM roles.

5. You can try the tool by executing it on a single function:

serverless puresec gen-roles --function myFunction

Links