How phalepallo/aws-cloud-governance-dashboard works
This is a read-only AWS cloud-governance dashboard: a user loads audit records, the frontend requests them from the API, and the backend reads them from DynamoDB before the UI filters, summarizes, and renders them. The README documents private S3 hosting behind CloudFront, API Gateway-to-Lambda integration, least-privilege access, and Terraform-managed infrastructure. The sampled sources confirm frontend processing and a DynamoDB scan; unsampled deployment wiring is represented only where the README or Terraform paths support it.
Main entry points: getAuditLogs.ts Audit handler · app.js Dashboard app · api.js Audit API client · lambda.tf REST API Gateway
Components 11
Static Hosting
- CloudFront CDN
terraform/cloudfront.tf - Private S3 site
terraform/frontend.tf
Dashboard UI
- Dashboard page
frontend/public/index.html - Dashboard app
frontend/src/app.js - Audit API client
frontend/src/api.js
Audit API
- REST API Gateway
terraform/lambda.tf - Audit handler
backend/src/handlers/getAuditLogs.ts - DynamoDB reader
backend/src/services/dynamodb.ts - Audit log table
terraform/dynamodb.tf - Access permissions
terraform/iam.tf
Other components
- Dashboard user
Connections 17
- Dashboard user → CloudFront CDN: opens dashboard
- CloudFront CDN → Private S3 site: fetches site
- Private S3 site → Dashboard page: serves page
- Dashboard page → Dashboard app: loads app
- Dashboard app → Audit API client: requests logs
- Audit API client → REST API Gateway: GET audit
- REST API Gateway → Audit handler: invokes
- Audit handler → DynamoDB reader: fetches logs
- DynamoDB reader → Audit log table: scans records
- Audit log table → DynamoDB reader: returns records
- DynamoDB reader → Audit handler: returns logs
- Audit handler → REST API Gateway: returns response
- REST API Gateway → Audit API client: returns JSON
- Audit API client → Dashboard app: returns logs
- Dashboard app → Dashboard user: shows filtered results
- Access permissions → Audit handler: grants execution
- Access permissions → Audit log table: limits data access