The Cloud Security Gap: Why I Built Cloudsentinel
Many developers know how to host apps on cloud, but when it comes to securing them, there's a big gap. Most tutorials only cover deployment, leaving security as an afterthought—and that can lead to serious problems. Navigating the complexities of VPCs, subnets, routing tables, firewalls, and IAM is far from easy, making it a challenge to get security just right.
For a deeper dive on this issue, check out this article.
What Cloudsentinel Does
- Real-Time Log Parsing: Connect your AWS account and let Cloudsentinel automatically parse logs as they come in.
- Smart Analysis: It aggregates and analyzes logs in real time, automatically blocking malicious IPs while still allowing you to manually intervene when needed.
- User-Friendly: Designed to make cloud security accessible to both experts and beginners.
How I Built It
- Tech Stack: I built it using Python, Flask, React, and lots of AWS APIs!
- Demo Video: Check out the detailed demo video and the diagram below

The Challenges
- Handling Big Data: Managing massive volumes of logs was a tough nut to crack.
- Minimizing False Positives: It took some fine-tuning to ensure the system accurately distinguishes between real threats and false alarms.
- Balancing Automation and Human Oversight: Keeping the system automated while allowing for manual review required a careful balance.
Proud Accomplishments
- Robust and Scalable: Cloudsentinel bridges the gap between complex security needs and user accessibility.
- Tested on AWS: I've tested it on my local AWS project, and it works perfectly!
- Exciting Future: This project is exactly what I want to build on and expand in the future.
What I Learned
- Diverse Log Types: I discovered there are way more log types than I expected, and each cloud provider has its own unique way of handling logs.
- Tricky Log Handling: Managing and preprocessing these diverse log formats is incredibly challenging. Each provider's logs require custom parsing logic, making it a complex but rewarding task.\
What's Next for Cloudsentinel
- More Log Integration: Expanding support to include even more log types.
- Predictive Threat Intelligence: Integrating features to predict threats before they strike.
- Enhanced Automation: Further improving automation without sacrificing the ability for manual review.
- Better Third-Party Integrations: Making it easier to incorporate with other tools and platforms.
Let's build a safer cloud together!
Built With
- amazon-web-services
- continue
- flask
- llm
- react


Log in or sign up for Devpost to join the conversation.