AppSec is fine. We're not paying enough attention to corporate infrastructure risks.   #strategy

CISA and the National Security Agency (NSA) released five joint Cybersecurity Information Sheets (CSIs) to provide organizations with recommended best practices and/or mitigations to improve the security of their cloud environments.   #defend   #strategy

The NSA is releasing "Top Ten Cloud Security Mitigation Strategies" to inform cloud customers about important security practices as they shift their data to cloud.   #defend   #strategy

How Canva validates vendor security by going beyond compliance.   #strategy

Integrating IAM Identity Center and Just-In-Time access.   #build   #iam

Lessons learned when doing evaluations, and building out a Threat Detection Maturity Framework for practical use.   #monitor   #strategy

A CTF designed to challenge your Kubernetes hacking skills through a series of critical network vulnerabilities and misconfigurations.   #attack   #kubernetes

Learn the what, why, and how of API Gateway access logs.   #aws   #explain   #monitor

NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters. You can also refer to the companion blog post.

CloudGrappler is a purpose-built tool designed for effortless querying of high-fidelity and single-event detections related to well-known threat actors in popular cloud environments such as AWS and Azure. You can also refer to the companion blog post.

Automatic Microsoft 365 Documentation to simplify the life of admins and consultants.

EKS NG AMI Updater is an open source project that can be used to update kubernetes node group images.

Post discussing the new optimistic stabilization strategy to shorten stack deployment times and improve visibility into resource provisioning.

Security Command Center Enterprise is the first multicloud risk management solution that fuses AI-powered SecOps with cloud security.

How to use a Cloud Key Management Service (Cloud KMS) encryption key with Dataflow.

Now you can use Microsoft Entra ID authentication on Azure Cosmos DB for PostgreSQL clusters in addition or instead of the native Postgres authentication.

Learn how to qualify for free egress when moving your data out of Azure.