Slack moved their entire fleet and tools to IMDSv2. In this article, they discuss the pitfalls of using IMDSv1 and their journey towards fully migrating to IMDSv2.   #aws   #explain   #iam

How you audit permissions in Kubernetes clusters with multiple authorizers? The only way to effectively do it is to review each authorization system that's in place in the cluster, and look at the permissions granted in each one.   #iam   #kubernetes

When it comes to AWS monitoring, you probably think of Amazon CloudWatch first. That's right, but there is another source of information about the health of your cloud infrastructure: Amazon EventBdrige.   #aws   #explain   #monitor

Writeup for a technique that allowed to leak an AWS account ID from an Amplify app.   #attack   #aws

A look at how authentication works in Kubernetes.   #explain   #kubernetes

How to use the sigstore Policy-controller to validate images in Kubernetes via an admission controller.   #build   #defend   #kubernetes

GitHub Action that given an organization or repository, produces information about the contributors over the specified time period.

Slack bots integrated with OpenAI APIs to streamline security team's workflows.

AHHHZURE is an automated deployment script that creates a vulnerable Azure cloud lab for offensive security practitioners and enthusiasts to brush up their cloud sec skills.

A security scanner that detects misconfigurations and vulnerabilities in the build pipelines of a repository.

A mostly-serverless distributed hash cracking platform.

AWS announced Amazon Route 53 Profiles, a new offering that allows you to define a standard DNS configuration, in the form of a Profile, that may include Route 53 private hosted zone (PHZ) associations, Route 53 Resolver forwarding rules, and Route 53 Resolver DNS Firewall rule groups, and apply this configuration to multiple VPCs in the same AWS Region.

Direct VPC egress for Cloud Run, now GA, lets Cloud Run resources send traffic directly to a VPC network without proxying it through Serverless VPC Access connectors.

Microsoft Incident Response experts have created a guide on using Windows Internals for forensic investigations.

Azure's regional Web Application Firewall (WAF) running on Application Gateway now supports greater control over request body inspection, and maximum size limits for request bodies and file uploads.

Gain visibility of IP traffic flowing through your virtual networks.