A Cloud Intrusion Detection System (IDS) that leverages AWS CloudTrail logs to monitor and detect suspicious activities in a cloud environment. The system implements both rule-based and anomaly-based detection techniques to identify potential security threats, such as unauthorized public access to S3 buckets and unusual API call behaviors.

Serverless AWS S3 monitoring system using SNS/SQS fanout, CloudWatch metrics, and automated cleanup via Lambda.