The pitfalls and risks of implementing a docs as code workflow, and a consideration for the future of writing docs with this workflow.   #ci/cd   #strategy

Post which explains how to identify principles and understand the identities present in GCP logs, including impersonation and third-party identities.   #explain   #gcp   #iam   #monitor

IAM started out as an easy idea that as more and more services were launched, started to become nightmarish to organize. It's too hard to do the right thing now and it's even harder to do the right thing in GCP compared to AWS.   #aws   #gcp   #iam

The Stedi team discovered a vulnerability in STS that caused role trust policy statements to be evaluated incorrectly.   #attack   #aws

Unit 42 researchers have discovered that the Muddled Libra group now actively targets software-as-a-service (SaaS) applications and cloud service provider (CSP) environments.   #attack   #aws   #saas

Post looking at using Nuclei templates to help with automated vulnerability detection, and detailing the creation of scenarios to test web applications and CI/CD vulnerabilities.   #attack   #ci/cd

See usage examples of Terraform 1.8's new launch-day provider-defined functions for AWS, Google Cloud, and Kubernetes.   #explain   #terraform

A command line tool that validates AWS IAM Policies in a Terraform template against AWS IAM best practice.

Packet, where are you? eBPF-based Linux kernel networking debugger.

Octo STS is a GitHub App that acts as a "Security Token Service" (aka STS) for the GitHub API. You can also refer to the companion blog post.

A Golang program to rotate AWS & GCP account keys.

A solution that uses serverless technologies to track and disable inactive user accounts.

Amazon built a formal model of Cedar in Lean, and proved that Cedar's components satisfy key safety and security properties.

Introducing Cloud NGFW Enterprise, which can deliver comprehensive Zero Trust network protection for your Google Cloud workloads.

Customers can now use Private Service Connect for private connectivity from applications to Cloud SQL databases.

Google announced innovations across their security portfolio that are designed to deliver stronger security outcomes.

Cloud Run for an easy AI starting point, and GKE for training and inference.

Lab that explains how to implement a modern workflow that uses free tools to automate the management of detection rules in Chronicle.