Cloud Misconfiguration Reporter

🚀 Inspiration As a Security Engineer, I’ve often seen how simple cloud misconfigurations—like public S3 buckets or overly permissive IAM roles—can lead to serious security breaches. I wanted to build a tool that helps teams detect and respond to these issues early, right from within Jira, where most of their workflows already live.

🧠 What I Learned This project deepened my understanding of:

Atlassian Forge’s serverless architecture Secure API integrations with AWS and third-party services Automating security workflows inside Jira 🛠️ How I Built It The app uses Forge’s scheduledTrigger to run periodic scans. It integrates with AWS APIs to check for common misconfigurations like:

Public S3 buckets Open security groups Unused IAM roles When a misconfiguration is found, the app automatically creates a Jira issue with details and remediation steps.

⚠️ Challenges Handling AWS authentication securely within Forge’s runtime Parsing and normalizing cloud configuration data Designing a user-friendly issue format that’s actionable for DevOps teams

Built With

• amazon-web-services
• api
• atlassian
• javascript
• rest-api