The Canary team shares a number of security choices they made that helped them achieve complete customer isolation.   #build   #strategy

Praetorian identified two GitHub actions that ran on issue comment events and would checkout and run code from an attacker-controlled branch if a specific keyword was included in a pull request comment.   #attack   #ci/cd

A post sharing code and tools to programmatically analyze and modify AWS Session Tokens.   #aws   #explain   #iam

Identity Protection, and the associated Risky reports, are a quick and easy starting point to check if Microsoft has flagged any risky sign-ins, workloads, or users.   #azure   #monitor

How Uber migrated their on-prem Hadoop-based data lake along with analytical and machine learning workloads to GCP.   #build   #defend   #strategy

Introducing the generally available capability of GitHub Artifact Attestations to secure your cloud-native supply chain packages and images.   #announcement   #ci/cd

Trail of Bits performed an audit of Homebrew, alongside its CI/CD pipelines.   #attack   #ci/cd

A post disclosing risks in using SSM Command Docs for software distribution.   #attack   #aws

How an attacker can escalate their privileges in Google Cloud by leveraging weak group join settings for groups that have been granted roles in GCP.   #attack   #gcp

Stateless cluster local OCI registry mirror.

How to build an end-to-end content repository using AWS services with a simple and dynamic access control based logic over unstructured data.

How to implement Amazon EKS monitoring and alerting using a custom solution that automates EKS observability capabilities for dynamic performance metrics.

How to build a CA hierarchy solution across AWS accounts and Regions, using AWS Private CA.

The second of a two-part series where we show you how to respond to a specific incident by using Amazon Security Lake as the primary data source to accelerate incident response workflow.

Follow these best practices when using Cloud Logging to centralize and manage logs from diverse sources.

The benefits of IAM group authentication, its use cases, and how to start using IAM group authentication with Cloud SQL for PostgreSQL and Cloud SQL for MySQL.