Skip to content
View shaurya-security's full-sized avatar

Block or report shaurya-security

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
shaurya-security/README.md

👋 Hi, I'm Aman Kumar (Shaurya)

Cloud • Linux • Infrastructure • Automation

Note: Most of my open-source work is published under the name Shaurya.

I build hands-on projects around cloud infrastructure, Linux, networking, monitoring, security, and automation.

My approach is practical: provision infrastructure, configure systems, generate real traffic and events, monitor what happens, investigate failures, and automate repetitive tasks.

What I work with

  • ☁️ AWS cloud infrastructure and networking
  • 🐧 Linux administration and command-line workflows
  • 🌐 Networking fundamentals — TCP/IP, DNS, routing, VPNs, firewalls
  • 🏗️ Infrastructure as Code with Terraform
  • ⚙️ Bash scripting and AWS CLI automation
  • 📊 Monitoring, logging, and event analysis
  • 🔐 Security monitoring and access control
  • 🔄 Troubleshooting and automation

Featured Projects

🔹 AWS Cloud Detection Pipeline

A hands-on cloud monitoring and detection environment that centralizes CloudTrail and VPC Flow Logs into Wazuh for log analysis, custom detection rules, and security event monitoring.

Tech: AWS · CloudTrail · VPC Flow Logs · Wazuh · Detection Engineering

View Project

🔹 Wazuh Active-Response Containment

An automated Linux security monitoring environment where Wazuh detects SSH brute-force activity and triggers firewall-based containment.

Tech: Wazuh · Active Response · iptables · MITRE ATT&CK · Linux

View Project

🔹 AWS Secure VPC with Terraform

A repeatable AWS network environment defined entirely through Terraform, including VPC networking, routing, NAT Gateway, IAM, and Systems Manager integration.

Tech: Terraform · AWS · IAM · SSM · VPC · NAT Gateway

View Project

🔹 AWS Infra CLI

A Bash-based toolkit for provisioning and inspecting AWS infrastructure through the AWS CLI, covering resources such as VPCs, EC2 instances, routing, and security groups.

Tech: Bash · AWS CLI · VPC · EC2 · Networking

View Project

💻 Technical Skills

Area Skills / Tools
☁️ Cloud AWS, EC2, VPC, IAM, SSM, CloudWatch, CloudTrail
🌐 Networking TCP/IP, DNS, routing, VPN, firewalls, security groups, NAT
🏗️ Infrastructure Terraform, Infrastructure as Code
🐧 Systems Linux, system administration, CLI
🔐 Security Wazuh, IAM least privilege, security monitoring, detection engineering
⚙️ Automation Bash, AWS CLI
📊 Monitoring & Logging CloudWatch, CloudTrail, VPC Flow Logs, Wazuh
🛠️ Tools Git, VS Code

📌 Currently Exploring

  • Advanced AWS infrastructure
  • Linux systems and administration
  • Networking and troubleshooting
  • Infrastructure automation
  • Cloud monitoring and logging
  • Security monitoring and detection
  • Infrastructure as Code

Connect

Building, breaking, troubleshooting, and automating real infrastructure.

Pinned Loading

  1. aws-secure-vpc-with-terraform aws-secure-vpc-with-terraform Public

    managed NAT Gateway (replacing a bastion-as-NAT instance), SSM-only instance access with no SSH exposure, S3 remote state with native locking, and a GitHub Actions pipeline running terraform fmt, t…

    HCL 1

  2. aws-infra-cli aws-infra-cli Public

    AWS infrastructure automation toolkit built with Bash and AWS CLI. 110+ functions across 8 modules managing VPCs, subnets, EC2, NAT, routing, and security groups without Terraform or CloudFormation.

    Shell

  3. aws-cloud-detection-pipeline aws-cloud-detection-pipeline Public

    Cloud-based detection engineering lab using AWS, Wazuh, CloudTrail, VPC Flow Logs, custom detections, and alert investigation.

    Shell

  4. wazuh-active-response-containment wazuh-active-response-containment Public

    Full Automated chain validated: attack → log generation → per-event detection → correlation → MITRE mapping → automated containment → firewall verification → timed recovery → dashboard evidence.

    Shell