How to quickly load data and search for interesting events in Athena.   #aws   #monitor

In variable scoring, when important context and interesting metadata is detected, the score can increase, signaling higher risk.   #monitor   #strategy

AWS made improvements to the AWSCompromisedKeyQuarantine policies in order to protect potentially compromised accounts. The changes were based on threat intelligence gathered from attacks being seen in the wild.   #aws   #defend   #monitor

This article introduces the basic principles, advantages, and limitations of five solutions for cross-Kubernetes cluster communication: underlay network, overlay CNI, submariner, skupper, and kubeslice.   #build   #kubernetes

Post explaining tradeoffs between environment variables, Terraform Cloud/Enterprise Workspaces, external Secrets Managers, and encrypted Backend Storage.   #hashicorp   #iac   #terraform   #vault

Common Fate has developed a Validate Cedar Policies GitHub Action, which can be used in your GitHub-based CI/CD pipelines to validate Cedar policies before they are deployed.   #build   #iam

On September 27, 2024, a vulnerability was identified in specific Okta configurations whereby an attacker with valid credentials could bypass configured conditions within application-specific sign-on policies.   #attack   #iam   #saas

Instead of trying to tackle everything at once, start by signing your builds with artifact attestations and verifying those signatures before you run them.   #ci/cd   #defend   #supply-chain

A new browser extension for Granted which makes authenticating to AWS IAM Identity Center faster and more secure.

Terraform templates for CI/CD to Cloud federation and Cloud2Cloud IAM federations.

A library that utilises the Z3 prover to attempt to answer questions about AWS IAM.

A framework for writing serverless apps in python. It allows you to quickly create and deploy applications that use AWS Lambda.

A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm. You can also refer to the companion blog post.

A decentralized approach to security notifications, using a self-service mechanism powered by AWS Service Catalog to enhance response times.

Post discussing the typical attack chain used in campaigns misusing file hosting services and detail the recently observed tactics, techniques, and procedures (TTPs), including the increasing use of certain defense evasion tactics.