Skip to content

annaone/quickstart-snyk-security

 
 

Repository files navigation

Snyk: Developer-First Security on the AWS Cloud

NOTE - This Quick Start is intended to be used as a submodule for Snyk integration in other Quick Start deployments, however it can be used as a standalone deployment within your AWS account.

Overview

Snyk finds and fixes vulnerabilities in applications that use open source, serverless and containers. Snyk's seamless integration into the developer workflow, with continuous monitoring of applications in production, empowers developers to continue to release fast, while ensuring secure code.

Please know that we may share who uses AWS Quick Starts with the AWS Partner Network (APN) Partner that collaborated with AWS on the content of the Quick Start.

Architecture

This Quick Start establishes cross-account access and enables Snyk integrations with AWS Lambda and Amazon Elastic Container Registry.

Quick Start Architecture for Snyk full integration

Figure 1: Quick Start architecture for Snyk full integration

As shown in Figure 1, the Quick Start for Snyk full integration sets up the following:

  • One cross-account role for integration with AWS Lambda.
  • One cross-account role for integration with Amazon Elastic Container Registry.

Quick Start Architecture for Snyk full integration

Figure 2: Quick Start architecture for Snyk integration with AWS Lambda

As shown in Figure 2, the Quick Start for Snyk integration with AWS Lambda sets up the following:

  • One cross-account role for integration with AWS Lambda.

Quick Start Architecture for Snyk full integration

Figure 3: Quick Start architecture for Snyk integration with Amazon Elastic Container Registry

As shown in Figure 3, the Quick Start for Snyk integration with Amazon Elastic Container Registry sets up the following:

  • One cross-account role for integration with Amazon Elastic Container Registry.

Cost and licenses

You are responsible for the cost of the AWS services used while running this Quick Start reference deployment. There is no additional cost for using the Quick Start.

The AWS CloudFormation template for this Quick Start includes configuration parameters that you can customize. Some of these settings may affect the cost of deployment. For cost estimates, see the pricing pages for each AWS service you will use. Prices are subject to change.

Tip: We recommend that you enable the AWS Cost and Usage Report. This report delivers billing metrics to an Amazon Simple Storage Service (Amazon S3) bucket in your account. It provides cost estimates based on usage throughout each month and finalizes the data at the end of the month. For more information about the report, see the AWS documentation.

In order to deploy this Quick Start, you will need a valid Snyk account. You can sign up for a free account or subscribe through the AWS Marketplace.

Deployment options

This Quick Start provides three deployment options:

  • Deploy Snyk full integration. This option builds two cross-account roles for integration with AWS Lambda and Amazon Elastic Container Registry.
  • Deploy Snyk integration for AWS Lambda. This option builds one cross-account role for integration with AWS Lambda.
  • Deploy Snyk integration for Amazon Elastic Container Registry. This option builds one cross-account role for integration with Amazon Elastic Container Registry.

Send us feedback

To post feedback, submit feature ideas, or report bugs, use the Issues section of the GitHub repository for this Quick Start. If you’d like to submit code, please review the Quick Start Contributor’s Guide.

Additional resources

AWS resources

AWS services

Snyk documentation

Other Quick Start reference deployments

About

AWS Quick Start Team

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published