reference deployment

Snyk Security on AWS

Find and automatically fix open-source vulnerabilities

This Quick Start helps you deploy Snyk Developer-First Security on the AWS Cloud. It is designed for developers, DevOps, security teams, and other roles within an organization that build, deploy, and maintain serverless applications or container images that use AWS Lambda and/or Amazon Elastic Container Registry (Amazon ECR).

Snyk finds and fixes vulnerabilities in applications that use open-source, serverless, and container solutions. Snyk's seamless integration into the developer workflow, with continuous monitoring of applications in production, empowers developers to continue to release fast, while ensuring secure code.

Snyk logo

This Quick Start was developed by Snyk, in collaboration with AWS. Snyk is an AWS Partner.

  •  What you'll build
  • This Quick Start sets up the following three deployment options:

    • AWS Lambda and Amazon ECR full integration with Snyk, including two cross-account AWS Identity and Access Management (IAM) roles for each product. 
    • AWS Lambda integration with Snyk, including one cross-account IAM role. 
    • Amazon ECR integration with Snyk, including one cross-account IAM role.
    • Amazon ECR integration with Snyk using an automated configuration, including one cross-account IAM role. This deployment option creates a new organization in Snyk's system.
  •  How to deploy
  • To deploy this Quick Start, follow the steps in the deployment guide, which includes these steps. The stack takes about 15 minutes to launch.

    1. If you don't already have an AWS account, sign up at, and sign in to your account.
    2. Sign in to your Snyk account.
    3. Launch the Quick Start by choosing from the following options:
    4. Test the deployment.

    Amazon may share user-deployment information with the AWS Partner that collaborated with AWS on the Quick Start.  

  •  Cost and licenses
  • This Quick Start is available to Snyk customers of all pricing plans. If you are not currently a Snyk customer, you can register for a free account on the Snyk login page. For information on paid plans, refer to the Snyk AWS Marketplace page.

    You are responsible for the cost of the AWS services used while running this Quick Start reference deployment. There is no additional cost for using the Quick Start.

     The AWS CloudFormation templates for this Quick Start include configuration parameters that you can customize. Some of these settings, such as instance type, affect the cost of deployment. For cost estimates, refer to the pricing pages for each AWS service you use. Prices are subject to change.

    Tip: After you deploy the Quick Start, enable the AWS Cost and Usage Report to track costs associated with the Quick Start. This report delivers billing metrics to an Amazon Simple Storage Service (Amazon S3) bucket in your account. It provides cost estimates based on usage throughout each month, and aggregates the data at the end of the month. For more information about the report, refer to  What are AWS Cost and Usage Reports?