This post offers a deep dive into Google Cloud's default service accounts, explaining their functionality, risks, and real-world adoption trends.   #explain   #gcp   #iam

This campaign used multiple private tools that abused multiple misconfigured web services, allowing attackers to steal credentials, clone private repositories, and extract cloud credentials from their source code. Credentials for over 10,000 private repositories were collected during the operation.   #attack   #aws

The impact of this issue could, in certain scenarios, allow an attacker to gain administrative access to a target AWS account, resulting in a full account takeover.   #attack   #aws

The article explores how threat actors manage to work around the limitations of the quarantine policy (AWSCompromisedKeyQuarantineV2) that is applied to identities whose credentials are leaked.   #attack   #aws   #iam

Apple is inviting security and privacy researchers to inspect PCC's security features by providing access to the PCC Virtual Research Environment (VRE) and expanding the Apple Security Bounty program to include PCC-related vulnerabilities.   #announcement

When people think about the term "us-east-1", they often think of AWS's very data center region that powers countless businesses worldwide. But what if someone registered the us-east-1.com domain?   #attack   #aws   #defend

If you are implementing GitHub Actions authentication workflow on cloud, make sure the condition on sub claim is restricted as specific as who you want to access your cloud account.   #build   #ci/cd   #process

A tag-based control plane for tagging operations on AWS.

This project allows to enforce access control on Kubernetes API requests using Cedar policies.

Opensource IDE For Exploring and Testing APIs.

A framework for JSON policy parsing, obfuscation, deobfuscation, and detection in cloud environments. You can also refer to the companion blog post.

By implementing this action type through a custom rule, you can set up basic, cost-effective measures to handle basic bots and control automated traffic to your applications.

You can now associate a security group with multiple VPCs in the same account using Security Group VPC Associations. When using shared VPC, you can now also share security groups with participant accounts in that shared VPC using Shared Security Groups.

How to use an Amazon Cognito user pool as a trusted token issuer for IAM Identity Center.

How you can use the advanced security features of Amazon Cognito to add threat detection to your passwordless authentication custom authentication flow.

When two companies engage in a merger or acquisition, you need to Integrate their cloud domains and organizations. Here's how on Google Cloud.