Inspiration
Cloud security is becoming increasingly complex as organizations manage multiple AWS accounts, cloud resources, and databases across different environments. Security teams often need to switch between IAM, CloudTrail, CloudWatch, and Amazon RDS consoles just to perform routine security audits. This fragmented workflow is time-consuming and increases the chances of missing critical security issues.
I wanted to build a single platform that centralizes AWS account auditing and database security monitoring into one intuitive dashboard. That idea became Cloud SecureLens—a unified cloud security auditing platform designed to simplify security operations and provide actionable insights for administrators.
What it does
Cloud SecureLens provides a centralized dashboard for monitoring AWS security posture and Amazon Aurora PostgreSQL databases.
Key capabilities include:
- Secure user authentication
- AWS account onboarding using Cross-Account IAM Roles or Access Keys
- IAM Security Audit (MFA status, inactive users, root account, access keys)
- Amazon Aurora Database Audit
- Login activity monitoring
- Audit Trail for tracking security events
- Security recommendations based on detected risks
- Role-Based Access Control (Admin, Analyst, Viewer)
Instead of navigating multiple AWS consoles, administrators can review their cloud security posture from a single interface.
How we built it
Cloud SecureLens is built using Next.js with the App Router and deployed on Vercel.
The frontend is developed using React, TypeScript, Tailwind CSS, and shadcn/ui to provide a modern and responsive user experience.
The backend uses Next.js API Routes together with the AWS SDK to securely communicate with AWS services.
AWS services integrated include:
- AWS IAM
- Amazon RDS
- AWS CloudTrail
- AWS CloudWatch
The application stores users, AWS account configurations, audit history, security findings, and monitoring metadata in Amazon Aurora PostgreSQL, which serves as the primary operational database.
This serverless architecture keeps the application scalable, maintainable, and easy to extend with additional AWS security services.
Challenges we ran into
One of the biggest challenges was designing a unified platform capable of collecting security information from multiple AWS services while presenting the data in a simple and meaningful way.
Another challenge was implementing secure AWS account onboarding using both Cross-Account IAM Roles and encrypted Access Keys while following AWS security best practices.
Building a clean dashboard that transforms complex AWS security information into actionable insights required careful UI design, backend architecture, and efficient data modeling.
Managing secure communication between the application, AWS APIs, and Amazon Aurora PostgreSQL while maintaining good performance was another valuable learning experience.
Accomplishments that we're proud of
We're proud to have built a production-ready cloud security auditing platform that combines multiple AWS services into one centralized dashboard.
Some highlights include:
- Secure AWS account onboarding
- IAM Security Auditing
- Amazon Aurora Database Auditing
- Login Activity Monitoring
- Audit Trail
- Security Dashboard
- Role-Based Access Control
- Modern responsive UI
- Deployment on Vercel
- Amazon Aurora PostgreSQL integration
Cloud SecureLens demonstrates how modern cloud-native technologies can simplify cloud security operations.
What we learned
This project gave us practical experience designing and building a full-stack cloud-native application using Vercel and AWS.
We learned how to securely integrate AWS services through the AWS SDK, work with Amazon Aurora PostgreSQL as a production database, design scalable API architectures, and create dashboards that convert raw security data into meaningful insights.
Beyond the technical implementation, we gained a deeper understanding of AWS security best practices, IAM architecture, database auditing, and cloud governance.
What's next for Cloud SecureLens
Cloud SecureLens is designed to grow into a comprehensive Cloud Security Posture Management (CSPM) platform.
Future enhancements include:
- AWS Security Hub integration
- Amazon GuardDuty findings
- AWS Config compliance monitoring
- Amazon Inspector vulnerability reports
- EventBridge real-time alerts
- Email and Slack notifications
- PDF and CSV compliance reports
- AI-powered security recommendations
- Automated remediation workflows
- Multi-account dashboard
- Multi-cloud support (Azure & Google Cloud)
Our long-term vision is to provide organizations with a single platform that continuously monitors cloud infrastructure, identifies security risks, and helps teams improve their overall cloud security posture.
Built With
- amazon-aurora-postgresql
- amazon-rds-relational-database-service
- aws-cloudtrail
- aws-cloudwatch
- aws-iam
- aws-sdk-for-javascript
- next.js
- node.js
- postgresql
- react
- shadcn/ui
- tailwind-css
- typescript
- vercel
Log in or sign up for Devpost to join the conversation.