Today we're going to provision some cloud infrastructure the Max Power way: by combining automation with unchecked AI output. Unfortunately, this method produces cloud infrastructure code that 1) works and 2) has terrible security properties.   #attack   #iac

Post exploring the limitations and effectiveness of AWS IAM Access Analyzer in detecting publicly exposed resources across various AWS services.   #aws   #explain

A good starting place for avoiding many of the sandbars in the vast seas of Kubernetes.   #explain   #kubernetes

A guide to tools for creating AWS IAM service roles.   #aws   #explain   #iam

This article outlines a methodology for AWS detection engineering, focusing on understanding AWS services, identifying potential threats, and developing effective detection strategies using CloudTrail logs and other AWS-native tools.   #aws   #monitor

Post focusing on the key components that make up the risk assignment rule.   #explain   #monitor

This article explores the security risks of unprotected container registries, demonstrating how attackers can exploit them to access sensitive data, deploy malicious containers, and potentially compromise entire systems.   #attack   #containers

Scripts for managing your Security Hub across an organization.

Test & Compare different Kubernetes security offerings on EKS, GKE and AKS. You can also refer to the companion blog post.

Open-source dev tools for enterprise SSO.

Produce secure packages and containers with declarative configurations.

By using PrivateLink with IAM and STS, you can now manage your IAM resources without going through public internet.

Key changes in Terraform Google Provider 6.0.0, including opt-out default labels, deletion protection for resources, and longer name prefixes.