GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • zoph-io
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles

This view

  • Original page
  • New address

GeezerVison is showing github.com — zoph.io

README.md

☁️ zoph.io · AWS Infrastructure & Security

Hi, I'm Victor Grenu, an independent AWS Infrastructure & Security Consultant based in France and working worldwide. zoph.io is my consulting boutique: I help teams build secure, cost-efficient, and automated AWS environments.

This GitHub org is where I publish tools, scripts, and resources I use in real-world client projects to improve AWS security, visibility, and operations.


🔐 What I Do

  • AWS Architecture: design, review, and optimize AWS infrastructure for security, scalability, and cost.
  • Security Audits & Hardening: identify vulnerabilities and implement defense-in-depth across AWS accounts and Organizations.
  • Automation & DevSecOps: Infrastructure as Code, CI/CD, and automated security controls.
  • Cloud Cost Optimization: actionable FinOps recommendations and automation.
  • Secure AI & LLM Adoption: guardrails, data protection, and security reviews for Amazon Bedrock, agents, and AI-powered workflows.

If you're working with AWS and care about security, compliance, and efficiency, you're in the right place.


🧰 Notable Projects

  • IAMTrail · iamtrail.com
    Archive of every change to AWS Managed IAM Policies since 2019, with full version history and diffs, plus AWS endpoint and GuardDuty change feeds.

  • aws-security-survival-kit
    Bare minimum AWS security alerting and secure-by-default configuration, with CloudFormation and EventBridge.

  • aws-trustline (formerly Know Your Enemies)
    Check external access on your AWS account: risky trust policies and third-party exposure.

  • clickops-sentinel
    Get notified, with AI-powered context, when someone changes your AWS account through the console instead of IaC.

  • subnet-watcher
    Monitor VPC subnet usage and prevent IP exhaustion across your accounts.

  • aws-dhmc-enabler
    Enforce secure host management defaults (SSM) at scale.


🚀 Also Built: unusd.cloud

Read-only AWS scans across 30+ services and every region. Weekly digest by email. Full report in the app.


📬 Let's Connect

  • Website: zoph.io
  • Blog: zoph.me
  • LinkedIn: grenuv
  • X: @zoph_io
  • Bluesky: @zoph.me
  • Email: [email protected]

Thanks for checking out the projects. Contributions and feedback are always welcome!

Pinned Loading

  1. aws-security-survival-kit aws-security-survival-kit Public

    Bare minimum AWS Security Alerting and Secure by default Configuration

    Makefile 525 43

  2. IAMTrail IAMTrail Public

    Forked from SummitRoute/aws_managed_policies

    Archive of every change to AWS Managed IAM Policies since 2019, with full version history and diffs. Browse it at iamtrail.com.

    TypeScript 513 38

  3. subnet-watcher subnet-watcher Public

    AWS VPC Subnets Watcher

    Python 81 8

  4. aws-internal-static-web-hosting aws-internal-static-web-hosting Public

    Host Internal Static Website on AWS

    Makefile 16

Repositories

Loading
Type
Language
Sort
Showing 10 of 12 repositories
  • IAMTrail Public Forked from SummitRoute/aws_managed_policies

    Archive of every change to AWS Managed IAM Policies since 2019, with full version history and diffs. Browse it at iamtrail.com.

    Uh oh!

    There was an error while loading. Please reload this page.

    zoph-io/IAMTrail's past year of commit activity
    TypeScript 513 GPL-3.0 63 0 2 Updated Nov 12, 2026
  • clickops-sentinel Public

    Get notified, with AI-powered context, when someone changes your AWS account through the AWS Console instead of IaC. EventBridge + Bedrock Claude agent + Amazon Q Developer.

    Uh oh!

    There was an error while loading. Please reload this page.

    zoph-io/clickops-sentinel's past year of commit activity
    Python 23 Apache-2.0 0 0 4 Updated Nov 8, 2026
  • terraform-restapi-unusd-account Public

    Terraform module to register an AWS account on unusd.cloud via the Customer API

    Uh oh!

    There was an error while loading. Please reload this page.

    zoph-io/terraform-restapi-unusd-account's past year of commit activity
    HCL 0 Apache-2.0 0 0 0 Updated Sep 28, 2026
  • .github Public

    Uh oh!

    There was an error while loading. Please reload this page.

    zoph-io/.github's past year of commit activity
    0 0 0 0 Updated Sep 26, 2026
  • aws-security-survival-kit Public

    Bare minimum AWS Security Alerting and Secure by default Configuration

    Uh oh!

    There was an error while loading. Please reload this page.

    zoph-io/aws-security-survival-kit's past year of commit activity
    Makefile 525 Apache-2.0 43 7 1 Updated Sep 20, 2026
  • aws-trustline Public

    Trustline: Check external access on your AWS account

    Uh oh!

    There was an error while loading. Please reload this page.

    zoph-io/aws-trustline's past year of commit activity
    Python 138 Apache-2.0 13 0 1 Updated Sep 4, 2026
  • subnet-watcher Public

    AWS VPC Subnets Watcher

    Uh oh!

    There was an error while loading. Please reload this page.

    zoph-io/subnet-watcher's past year of commit activity
    Python 81 Apache-2.0 8 0 0 Updated Jun 20, 2026
  • url-shortener Public

    serverless url-shortener

    Uh oh!

    There was an error while loading. Please reload this page.

    zoph-io/url-shortener's past year of commit activity
    Python 12 1 0 0 Updated Aug 25, 2024
  • serverless-aws-https-webredirect Public

    Serverless AWS HTTPS Webredirect

    Uh oh!

    There was an error while loading. Please reload this page.

    zoph-io/serverless-aws-https-webredirect's past year of commit activity
    Makefile 5 GPL-3.0 0 0 0 Updated Jan 2, 2024
  • aws-internal-static-web-hosting Public

    Host Internal Static Website on AWS

    Uh oh!

    There was an error while loading. Please reload this page.

    zoph-io/aws-internal-static-web-hosting's past year of commit activity
    Makefile 16 GPL-3.0 0 0 0 Updated Dec 6, 2023
View all repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Top languages

Loading…

Uh oh!

There was an error while loading. Please reload this page.

Most used topics

Loading…

Uh oh!

There was an error while loading. Please reload this page.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.