This blog post discusses lateral movement risks from on-prem to the cloud, explaining attacker TTPs, and outlining best practices for cloud builders and defenders to help secure their cloud environments and mitigate risk.   #attack   #azure

The article discusses the differences between traditional forensics and cloud forensics, highlighting the importance of understanding cloud-specific artifacts and logs.   #aws   #monitor

This article describes the attack lifecycle and detection opportunities for a cloud-focused, financially motivated threat actor.   #attack   #aws   #defend   #monitor

Walk through the necessary steps to set up an AWS Lambda function to email notifications to IAM Users when their AWS Web Console passwords are expiring.   #aws   #build   #iam

A simple-term introduction to S3 Object Lock, what it is, and how does it work.   #aws   #explain

Modifications made using AADGraph are not properly logged, endangering integrity and non-repudiation of Azure AD policies.   #attack   #azure

A look at how cgroups are used in Linux and container systems.   #containers   #explain

The "check" block has been introduced in the latest pre-release of Terraform (v1.5.0). This allows practitioners to define assertions based on data source values to verify the state of the infrastructure on an ongoing basis.   #explain   #terraform

Version 5.0 of the HashiCorp Terraform AWS provider brings improvements to default tags, allowing practitioners to set tags at the provider level.   #build   #terraform

Open-source temporary elevated access solution for AWS IAM Identity Center.

Run recon tools and vulnerability scans in a distributed way in AWS.

An engine for least privilege principle enforcement on GCP cloud.

A tool which helps crafting AWS IAM Policies and converting them to IaC.

AWS CloudSaga - Simulate security events in AWS.

Summary of an AWS post aiming to help you decide which approach is best to securely connect your applications, either residing on premises or hosted outside of AWS, to your AWS environment when no human interaction comes into play.

Post looking into the recently launched TLS inspection configuration for ingress inspection architectures and discussing considerations for enabling this feature.

How to use Amazon Elastic Load Balancing (ELB) to apply a more granular control on the cipher suites that are used between clients and servers when establishing an SSL/TLS connection with Amazon API Gateway.

How to use AWS IAM Access Analyzer programmatically to automate the detection of public access to your resources in an AWS account, and how to work with the Access Analyzer API to create an analyzer and call specific API functions from code.

Google introduced Cloud Run sidecars, allowing you to start independent sidecar containers that run alongside the main container serving web requests.

Log Analytics in Cloud Logging lets you search and aggregate network logs to find network trends and anomalies, and troubleshoot networking issues.

New authentication method for the Self-hosted gateway with the configuration endpoint.

Learn how GitHub Advanced Security for Azure DevOps implements code scanning, secret scanning, and dependency scanning in Azure DevOps.

You can now mount secrets as volumes in Azure Container Apps.