# No Code? No Problem! Crafting AI Apps with AWS PartyRock

Generative AI, LLMs, & GPTs are the buzzwords these days. Every day numerous tools & websites are launched with AI offerings. Most often, the best ones are expensive to afford & the free ones won't give desired results.

Just a week ago, AWS launched [PartyRock](https://aws.amazon.com/about-aws/whats-new/2023/11/partyrock-amazon-bedrock-playground/), an [Amazon Bedrock Playground](https://aws.amazon.com/bedrock/). It's a Generative AI app-building platform. No code required, just a web interface that takes text & generates the desired apps. The best part is it's free of cost & doesn't require an AWS account.

We will create a few apps to benchmark the capability of the platform.

### CourseFinder: Tailored Learning Pathways

We want to learn new things but with access to unlimited content on the internet, it's hard to find the right path. [This CourseFinder app](https://partyrock.aws/u/testinguser883/dsDXBSfex/CourseFinder) takes input from you & suggests the best courses available. The best part is once you review the results, you can enter the timeframe you've to spend on it & it suggests a tailored path for the timeframe.

The path to learning "iPhone photography".

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1700999800220/6a4ebec0-f2fd-4749-9387-264ee6e370e9.png align="center")

The path to learning "Asian cooking".

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701000119739/e87dc69f-efb6-48f2-b071-c060b10129fc.png align="center")

### Storytelling: An Innovative Approach

Kids and adults love stories & movies. We wonder what if the storyline takes an alternative approach once in a while. [This app](https://partyrock.aws/u/testinguser883/gd1rXnaMP/StoryPathGenerator) generates multiple ways for the story, you can choose any option for the way forward & it generates an image.

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701002172064/8886e112-d99d-42e1-8db4-03c2fe793f8b.png align="center")

This can easily be expanded to write an entire storybook. For example, once the image is generated, create a new widget to suggest the next 4 story lines, take user input, update the image & suggest the next 4 story paths to move ahead. This will be a lot of fun!

Being from a security background, I was curious on how this can help with security related work. Let's benchmark!

### CTF Challenges Builder

Security teams are enthusiastic about playing CTFs that include challenges from different areas like cryptography, steganography, web, mobile, network, reversing, malware & so on. We can use this to generate ideas for innovative CTF challenges & chaining of attacks.

**NOTE: I'm not making this app public as I hacked my way into the LLMs to make it generate vulnerable code for various tech stacks & exploit it.**

#### SSRF vulnerability

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701004048474/62fefd7a-5ebd-4697-a3a3-da9cc22f3bdc.png align="center")

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701004090158/3391ced8-b826-4423-aa3c-f06c79b6707c.png align="center")

#### Host Header Injection Vulnerability

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701004197801/dbc42e45-e97d-4578-8edd-9a02db017e2e.png align="center")

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701004224928/f09baf23-37bd-40ce-b4b3-e6e6730ecd3f.png align="center")

### Architecture Threat Modeler

Developers, DevOps and security teams review different system architectures regularly looking for misconfigurations & vulnerabilities.

[This app](https://partyrock.aws/u/testinguser883/R4PI1UIc2/Architecture-Threat-Modeler) takes the architecture design as input,

* Lists all the possible components that are required to build the design
    
* Once components are identified, it suggests possible Threat Boundaries between all components
    
* Then, it browses the internet & suggests available open-source projects that match the given architecture
    

#### 3 tier architecture in AWS

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701002755626/56a64531-cbe4-4d5d-ba93-40aa2554a857.png align="center")

#### 3 tier architecture in Azure

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701003087033/7823da03-0ab4-42a1-8d0f-c50f8c2a8566.png align="center")

### Conclusion

The synchronous prompt chaining feature in PartyRock excited me the most. Updating the main question triggers the execution of the app, generates content & the content is automatically passed as input to a different prompt to perform other operation & so on making it powerful.