Welcome to my side projects page, where I’ve open-sourced a collection of tools and projects that I’ve built over the years.

With a focus on the AWS ecosystem, these projects have been a way for me to learn and explore new technologies.

While they were created with my specific use-cases in mind, I hope they can be helpful to others as well. Most of them came out of my independent AWS consulting boutique, zoph.io.

If you have any ideas or feature requests, feel free to open an issue on GitHub or contribute to the project. Thanks for checking them out!

unusd.cloud

You know that feeling when you forget to turn off your AWS resources and get hit with a huge bill? Yeah, that’s what I built unusd.cloud to solve. A SaaS that automatically finds all the stuff you’re paying for but not using - those forgotten EC2 instances, unused EBS volumes, and idle RDS databases that are just burning money.

It scans your entire AWS setup and sends you weekly reports with actionable insights to cut costs. Think of it as your personal AWS waste detective that saves you money while reducing your security footprint and carbon impact.

Learn more: unusd.cloud

IAMTrail

AWS silently updates Managed IAM Policies all the time. IAMTrail catches every single change. Full version history and diffs for 1,545+ policies, archived since 2019. Also tracks endpoint signals across 46 regions and 310+ services via botocore, spotting new AWS services and region expansions before official announcements.

Free, no account needed. Subscribe to daily or weekly email digests with inline diffs.

GitHub stars

ClickOps Sentinel

Get notified, with AI-powered context, when someone changes your AWS account through the Console instead of infrastructure as code. It detects console-session write actions in near real time, investigates each one with a Claude agent on Amazon Bedrock (intent, security and cost impact, session narrative), and delivers a reasoned alert to Slack, Microsoft Teams, or a rich HTML email.

Link: clickops-sentinel

GitHub stars

AWS Security Digest Newsletter (Acquired)

Acquired by Plerion in May 2024.

A comprehensive weekly newsletter that curates the most important AWS security news, vulnerabilities, best practices, and threat intelligence. Join thousands of security professionals, DevOps engineers, and cloud architects who rely on this digest to stay ahead of emerging threats and security updates in the AWS ecosystem.

Learn more: AWS Security Digest Newsletter

AWS Security Survival Kit

This AWS Security Survival Kit will allow you to set up minimal alerting on typical suspicious activities and security configuration for your AWS Accounts.

Link: aws-security-survival-kit

GitHub stars

AWS Trustline

Map and audit third-party trust relationships in your AWS account. Trustline analyzes IAM Role trust policies and S3 bucket policies to identify who has access to your resources. It cross-references account IDs against 500+ known AWS vendor accounts from fwd:cloudsec and flags confused deputy risks (missing ExternalId conditions).

Link: AWS Trustline

GitHub stars

AWS Subnet-Watcher

AWS does not provide any CloudWatch (CW) metrics to monitor available IPs in VPC subnets. It can be difficult to avoid shortages and get alerted when you are approaching the limit. This project aims to solve this problem by giving you metrics and alerting.

Link: AWS Subnet-Watcher

GitHub stars

S3 Backup Notifier

Daily alert for missing objects in AWS S3 Prefix, useful for backup checks.

s3-backup-notifier

GitHub stars

Update53-pub

Update Route 53 DNS Record with your current public IP (Like DynDNS)

Link: update53-pub

GitHub stars

Deprecated

  • ansible-mac-install (forked) - Ansible runbook to boostrap your brand new macOS installation with devtools, and SRE/Ops applications. GitHub stars
  • cockpit.zoph.io - This cockpit tracks unlimited history of chosen X Accounts from a X List, controllable via Twitter for follower/following trends
  • awscon-onepager - This repository intends to centralize digest one-pagers recap about AWS Events / Conferences. GitHub stars
  • aws-pet-project-template - A template to convert a new idea to a functional “Proof of Concept” on AWS. GitHub stars
  • aws-security-toolbox - A container dedicated for DevSecOps folks containing all community-driven tools for security analysis on AWS GitHub stars
  • qTweet - Dead simple SQS to X (Twitter) speaker using a Lambda function and AWS Secrets Manager. Superseded by qbsky for Bluesky. GitHub stars
  • serverless-jobs-using-fargate - A template to schedule jobs using Docker containers on AWS Fargate (serverless). GitHub stars
  • tower-control - Multi-Docker containers for observability of home automation systems (Jeedom): Grafana + InfluxDB + Telegraf.