aws-samples

aws-samples/sample-identity-recertification-vigil

Serverless AWS access recertification engine: discover resources by owner tag, collect keep/trim/revoke decisions, and actually enforce them with scoped changes, hash-chained evidence, and rollback.

1 stars 2 forks 1 watchers JavaScript MIT No Attribution

access-governance access-review aws-sam cloud-security compliance iam lambda least-privilege recertification serverless

5 Open Issues Need Help Last updated: Jul 24, 2026

Open Issues Need Help

View All on GitHub

Document tagging a resource for discovery about 3 hours ago

good first issue

aws-samples/sample-identity-recertification-vigil

1

Serverless AWS access recertification engine: discover resources by owner tag, collect keep/trim/revoke decisions, and actually enforce them with scoped changes, hash-chained evidence, and rollback.

JavaScript

#access-governance#access-review#aws-sam#cloud-security#compliance#iam#lambda#least-privilege#recertification#serverless

Add a 'no resources found' empty state to the discovery run history 26 days ago

good first issue

aws-samples/sample-identity-recertification-vigil

1

Serverless AWS access recertification engine: discover resources by owner tag, collect keep/trim/revoke decisions, and actually enforce them with scoped changes, hash-chained evidence, and rollback.

JavaScript

#access-governance#access-review#aws-sam#cloud-security#compliance#iam#lambda#least-privilege#recertification#serverless

Add a Secrets Manager connector 26 days ago

good first issue

aws-samples/sample-identity-recertification-vigil

1

Serverless AWS access recertification engine: discover resources by owner tag, collect keep/trim/revoke decisions, and actually enforce them with scoped changes, hash-chained evidence, and rollback.

JavaScript

#access-governance#access-review#aws-sam#cloud-security#compliance#iam#lambda#least-privilege#recertification#serverless

Add an SQS queue connector 26 days ago

good first issue

aws-samples/sample-identity-recertification-vigil

1

Serverless AWS access recertification engine: discover resources by owner tag, collect keep/trim/revoke decisions, and actually enforce them with scoped changes, hash-chained evidence, and rollback.

JavaScript

#access-governance#access-review#aws-sam#cloud-security#compliance#iam#lambda#least-privilege#recertification#serverless

Add an SNS topic connector 26 days ago

good first issue

aws-samples/sample-identity-recertification-vigil

1

Serverless AWS access recertification engine: discover resources by owner tag, collect keep/trim/revoke decisions, and actually enforce them with scoped changes, hash-chained evidence, and rollback.

JavaScript

#access-governance#access-review#aws-sam#cloud-security#compliance#iam#lambda#least-privilege#recertification#serverless