How Canva does endpoint vulnerability management on their endpoint fleet comprising over 5000 devices deployed across numerous countries worldwide.   #defend   #strategy

How to build a GitOps-based CI/CD pipeline built on GitHub Actions, designed for SOC 2 compliance.   #build   #ci/cd

This guide walks through the steps you'll need to take to upgrade your EKS clusters. It includes guidance on when and how to complete these upgrades as well as tools that can make it easier for you to upgrade safely and securely.   #build   #explain   #kubernetes

A plugin has replaced the way Falco consumes the Audit Logs generated by a K8s API server. With these plugins, Falco covers more in depth the aspects of your infrastructure and allows you to use a single syntax for rules.   #aws   #falco   #kubernetes

A look at how seccomp is used in Linux and container systems.   #containers   #explain

A GitHub App that acts like a Security Token Service (STS) for the Github API.

A Terraform module that simplifies the deployment of Assured Workloads.

A tool that traces TCP interactions with the EC2 Instance Metadata Service (IMDS).

A command line interface for Amazon EBS snapshots.

Independently deploy customized honeyservices in AWS to trigger alerts on unauthorized access. You can also refer to the companion blog post.

Dependabot's core logic for creating update PRs.

This capability allows you to encrypt your events using your own keys instead of an AWS owned key.

How you can use the Amazon Detective Investigation feature to investigate IAM user and role activity and use the Security Lake integration to determine the specific EC2 instances a threat actor appeared to be targeting.

How you can enable Identity Center and use AWS managed applications, such as Amazon Q, without migrating existing IAM federation flows to Identity Center.

A way to create preventative controls through the use of service control policies (SCPs) and detective controls through event-driven automation.

Starting June 16, exposed service account keys that have been detected in services including public repos will be automatically disabled by default for new and existing customers.

Protect the sensitive data getting stored in your Web Application Firewall (WAF) using log scrubbing on Azure's global Web Application Firewall running on Azure Front Door.

This July, Azure teams will begin rolling out additional tenant-level security measures to require multi-factor authentication (MFA).