Experimenting with the feasibility of running Dagger CI/CD pipelines isolated from each other using Firecracker microVMs to provide a strong security model in a multi-tenant scenario. When a customer runs a pipeline, their containers are executed in an isolated environment.   #ci/cd   #defend

Low-maintenance Cloud-Based Anomaly Detection System with Bytewax, Redpanda, and AWS.   #aws   #monitor

Pinterest Engineering has developed a real-time anomaly detection system called Warden, which uses machine learning to identify unusual activity and potential security threats on their platform.   #defend   #monitor

Learn how to identify unused and unnecessary long-lived IAM User access keys.   #aws   #defend   #iam

A look at how the EC2 Instance Metadata Service can be taken advantage of.   #attack   #aws

API Gateway supports quite a few authentication and authorization methods, plus, you can always authenticate users inside your endpoint. So, the big question is, how do you choose the right one for your API?   #aws   #build   #iam

A deep-dive blogpost on how to implement Passkeys and how to think about the threat model and security guarantees they offer.   #build   #explain

An in-depth analysis of Kubernetes networking, including container-to-container, pod-to-pod, pod-to-service, ingress, and egress communication.   #explain   #kubernetes

Google now offers general availability of Google Trust Services ACME endpoint allowing anyone to get TLS certificates for their websites for free.   #announcement   #build   #gcp

Howto use Nix to turn Open Policy Agent policies into standalone CLI tools.   #containers   #opa

Macaron is a supply chain security analysis tool from Oracle Labs that checks conformance to SLSA framework. You can also refer to the companion blog post.

Fast, Declarative, Reproducible, and Composable Developer Environments.

Crowdsourced list of sensitive IAM Actions.

A tool that traces TCP interactions with the EC2 Instance Metadata Service (IMDS), assisting in identifying the processes making IMDSv1 calls on a host.

AWS announced the general availability of Amazon Security Lake, first announced in a preview release at 2022 re:Invent.

How to configure your Amazon Security Lake solution with cloud activity data from Microsoft Azure Monitor activity log, which you can query alongside your existing AWS CloudTrail data.

AWS has re-published the whitepaper Architecting for PCI DSS Scoping and Segmentation on AWS to provide guidance on how to properly define the scope of your Payment Card Industry (PCI) Data Security Standard (DSS) workloads that are running in the AWS Cloud.

AWS released the AWS Blueprint for Ransomware Defense, a new resource that both enterprise and public sector organizations can use to implement preventative measures to protect data from ransomware events.

Google Cloud is announcing Cross-Cloud Interconnect, which lets you connect any cloud to Google Cloud via their secure, high-bandwidth global network.

SCC has released new capabilities to help detect compromised identities and protect against risks from external attackers and malicious insiders.