Secure Software systems

  Web based CTF implemented by using Python Flask, Jinja, boto3, AWS API gateway, Cognito, Elasticsearch, Kibana and deployed on AWS using Elastic beanstalk. In this application it uses a leaderboard. The application writes data to DynamoDB and by using  DynamoDB streams I have streamed the data to a lambda function which I have written to process those data and write to Elasticsearch to sort/search and retrieve in the real-time Dashboard. To send emails via the SMTP server a Lambda function has been used. In order to send those emails, it required to whitelist the IP. Since lambda has a dynamic IP, I have placed the function in a private subnet and routed the traffic through a NAT gateway and used the EIP of the NAT gateway to whitelist.

Splunk Cloud CI/CD pipeline - GitOps   Dev stage     Workflow   When the co nfigurations get pushed to a feature branch or to the dev branch , the Jenkins pipeline get triggered . This would send a notification to the developer in the MS Teams channel acknowledging that the build process has been started.   The pipeline will execute the stages relevant to dev changeset. this includes running validations and generating changelogs .   The generated reports get send to the developer via MS Teams channel.   The changelog report includes the details about the changes that would take effect on Splunk staging environment (When changes get committed to staging branch).     W hen you push configurations to feature/dev branch Pipeline runs to execute terraform plan, but nothing is applied to any environment.   ( e . g : I f the developer places/remove s the Splunk app he’s developed from the Splunkapps /deployer-apps directory and pushes the changes in to a feature branch it will