Skip to content
Back to projects
Diagram: Internet SSH traffic reaches Cowrie on EC2, logs flow to S3 and trigger Lambda, with SNS alerts, CloudWatch and SSM administration, all deployed with Terraform
Cloud · Security2026

AWS Honeypot with Terraform

SSH honeypot with serverless log analysis and infrastructure as code.

  • Terraform≥ 1.5
  • AWS provider~> 5.0
  • AWSEC2 · S3 · Lambda · SNS · CloudWatch · SSM
  • CowrieSSH honeypot
  • LambdaPython 3.11
  • PowerShellup / down
  • LicenseMIT
Technical documentationRepository

What I did

  • Modular Terraform
  • Automated deployment and teardown
  • Least-privilege IAM, encryption and SSM access

Stack

TerraformAWS EC2Amazon S3AWS LambdaSNSCloudWatchSSM

https://github.com/alonsomarcosm99/DAMN-TEAMSSN