How the Segment Team built solutions to protect customers from committed and orphaned secrets.   #ci/cd   #defend

This post compares Systems Manager, Secrets Manager, Key Management Service, and environment variables for handling your secrets in Lambda.   #aws   #explain

Post diving into the growing complexities of managing cybersecurity data and the growing importance of data engineering in bolstering security posture, operations and compliance.   #monitor   #strategy

A guide on how to achieve cloud & application security data protection and maturity in a cloud native way.   #strategy

While it simplifies cross-account access to DynamoDB tables, eliminating the need to assume IAM roles. It still begs the question: Is cross-account data access even a good idea?.   #aws   #explain   #iam

The idea here is to see how someone could use Tailscale as part of getting persistence on a compromised system (for example a Kubernetes cluster) to keep access in a relatively stealthy fashion.   #attack   #containers   #kubernetes

An interesting breakdown of the 2023 ConvertKit AWS bill.   #strategy

Access, a centralized portal for employees to transparently discover, request, and manage their access for all internal systems needed to do their jobs. You can also refer to the companion blog post.

Enumerate Microsoft Entra ID (Azure AD) fast.

Add a layer of active defense to your cloud applications.

Terraform module for serverless certificate authority on AWS. You can also refer to the companion blog post.

A .NET application built to facilitate Confluence exploration. You can also refer to the companion blog post.

A revamped page that collects writeups about documentation, security, infrastructure, development environments & CI, and software engineering.

How you can apply 2 techniques (bulk authorization and response caching) when listing authorized resources and actions and loading multiple components on webpages.

You can now set all new Amazon EC2 instance launches in your account to use Instance Metadata Service Version 2 (IMDSv2) by default.

Azure Container Apps now provides a free managed certificate for your custom domain.