Paul Duvall

ai-development-patterns. A comprehensive collection of AI development patterns for building software with AI assistance, organized by implementation maturity and development lifecycle phases. Includes Foundation, Development, and Operations patterns with practical examples and anti-patterns.

claude-code. Transform Claude Code into a complete development platform with AI-powered commands that automate your entire software development workflow.

aws-compliance-workshop. Shell

aws-encryption-workshop. Python

aws-5-mins. Example scripts for "AWS in 5 Mins" Videos

vibecoding. Windsurf Vibe Coding: AI-powered development workflow automation with persistent memories and rule-based standards

csoa. Continuous Security on AWS Workshop (CSOA) published by Pearson

diagrams-as-code. Shell

gha-aws-oidc-bootstrap. Bootstrap secure AWS IAM roles for GitHub Actions OIDC with this repo: zero static credentials, least-privilege policies, multi-repo support via allowed_repos.txt, and automated setup using Bash and CloudFormation. Security and quality enforced in CI/CD

owasp_llm_top10. OWASP LLM Top 10: A Python 3.11 framework for detecting, testing, and reporting security vulnerabilities in large language model (LLM) applications. Features AWS integration, CI/CD with GitHub Actions, IaC, and automated prompt injection detection demos.

agiledevops. Agile DevOps

automating-governance-sample. Sample pipeline for handling of security events in AWS.

continuousdelivery. Continuous Delivery Training

greateightgoals. The Ovechkin Goal Tracker tracks Alex Ovechkin's progress toward breaking Wayne Gretzky's NHL goal record (894). It fetches real-time stats, calculates projections, and delivers updates via CLI, automated static website, and email notifications. Built with AWS serverless architecture (Lambda, CloudFormation, S3, CloudFront, EventBridge, SES)

taskcat-runner. Run TaskCat across multiple repos

continuous_delivery_open_platform_jenkins_configuration.

cedar. Enterprise authorization with AWS Cedar: shift-left security (SAST, policy validation, ATDD tests) and shift-right runtime enforcement. Features automated CI/CD, Amazon Verified Permissions integration, zero-credential OIDC deployment, and comprehensive policy testing across the entire SDLC.

iam-policy-tester-pipeline. Test IAM Policies in Multi Account Structures in your CI/CD pipeline

api-gateway. A Python 3.11 AWS serverless API Gateway and Lambda solution using CloudFormation IaC. Features secure config via Parameter Store, automated deployment, robust testing, and CI/CD with GitHub Actions. Follows twelve-factor app and best practices for cloud-native APIs.

mu-basic. HTML

cfn_nag_examples.

devops-essentials. Source code samples for DevOps Essentials on AWS Complete Video Course

sample-pipeline-with-cfn-nag. Sample repository to demonstrate using cfn_nag in CodePipeline

sample_app. Ruby on Rails Tutorial sample application

continuous_integration_example. Demo project for Continuous Integration - from the book Continuous Integration (Duvall, et. al)

continuous_delivery_open_platform. Open platform for CD