A collection of SaaS attack techniques to help defenders understand the threats they face. You can also refer to the companion repository.   #attack   #saas

While popular, GitHub-to-AWS keyless authentication mechanisms can be insecurely configured.   #attack   #aws   #ci/cd

Post walking through a methodology for beating the AWS WAF CAPTCHA challenges programmatically.   #attack   #aws

This research details a new technique that can be used by threat actors for supply chain attacks on open-source repositories using GCP, Azure and AWS.   #attack   #ci/cd

Slides from @smarticu5 and @raesene container security workshop delivered at SteelCon, which covers the basics of Docker and Kubernetes security.   #attack   #containers   #kubernetes

Can Sigma rules provide first-response capabilities in a post-compromised AWS environment?   #aws   #monitor

Post pondering about infrastructure complexity, the current state of infrastructure as code, and how it will not get simpler.   #iac   #strategy

A mind map to link together all the different networking-related concepts from AWS.   #aws   #explain

This article traces the evolution of identity in systems programming to the current cloud native era, and shows how identity is now key to how cloud native projects, like Kubernetes and Cilium, create powerful platforms in the real world today.   #explain   #kubernetes

This blog post introduces Kerberos and LDAP integration with the OCI File Storage Service, providing an overview of the features and their general configuration requirements.   #containers

Deliberately Vulnerable GitHub Actions CI/CD Environment.

PowerShell module for Office 365 and Azure log collection.

Deploys all the resources needed in order to setup resource assessment capabilities in an AWS account.

A nifty utility that helps building AWS CLI commands.

Rolesanywhere-credential-helper implements the signing process for IAM Roles Anywhere's CreateSession API and returns temporary credentials in a standard JSON format that is compatible with the credential_process feature available across the language SDKs.

A two-part blog post that provides prescriptive guidance on how you can use AWS Secrets Manager to help you achieve a cloud-based and modern secrets management system.

Learn how to configure open source Keycloak on Amazon Elastic Kubernetes Service (Amazon EKS) using Terraform to manage an open source application in AWS.

IAM Roles Anywhere released credential helper version 1.0.5 to include support for X.509 certificates and private keys that are stored in macOS and Windows certificate stores.

How to configure an example Javascript web application hosted in GCP to call Google Cloud APIs after being authenticated with an Azure AD using Workforce Identity Federation.

Cloud-centered integrations supported by Secret Manager with other Google Cloud services in the software supply chain make it easier and safer to store and access sensitive information.

You can now secure service account keys with customizable options to enforce expiration dates.

Google introduced new features in Cloud Armor: granular rate limiting and flexible options to configure custom rules, and custom IP headers to further enhance protections against DDoS and other attacks.

The ideal candidate will assist Snowflake leadership in making informed, knowledgeable and data driven decisions based on actionable threat intelligence.

The Match Group is looking for a DevSecOps professional to provide cloud native security expertise to implement security automation, monitoring product architecture for security misconfigurations, and applying security for all phases of the software development life cycle.

Google is looking for a Security Engineer to drive technical in-depth search into various Cloud-related products, tech stacks, and infrastructure.

ITV Is looking for Security Engineers to help secure their data and cloud platforms.