Abdullah Alhalawani

Cybersecurity Specialization · Cohort 2026

Cloud Infrastructure Risk Analyzer

Cloud environments can become vulnerable due to security misconfigurations that are difficult to identify manually, especially in large infrastructures. Examples include publicly accessible Amazon S3 buckets, overly permissive IAM roles, internet-exposed databases, or insecure EC2 security group rules. This project proposes a Cloud Security Posture Management (CSPM) platform that automatically scans cloud resources using the AWS SDK, detects security risks based on predefined best-practice rules, and generates a detailed report with severity levels and remediation recommendations. By automating the assessment process, the platform helps organizations quickly identify and resolve cloud security issues before they can be exploited. As organizations increasingly rely on cloud platforms such as AWS, maintaining a secure cloud environment becomes more challenging due to the growing number of resources and configurations. Security misconfigurations, such as public S3 buckets, databases with public IP addresses, or overly permissive IAM policies, can expose sensitive data and increase the risk of cyberattacks. This project aims to develop a Cloud Security Posture Management (CSPM) platform that automatically scans AWS infrastructure, identifies security misconfigurations using predefined security rules, assesses their risk levels, and provides clear remediation recommendations through an interactive dashboard, enabling organizations to strengthen their cloud security posture efficiently.

Read the final report (PDF)