Post exploring some common missteps in securing your AWS OIDC.   #aws   #build   #ci/cd   #iam

Chris Farris discusses the implementation of security invariants within an AWS management account, specifically the payer account where organizational policies do not apply.   #aws   #defend   #iam

Post running through the various permutations of the root user and the --privileged flag.   #containers   #explain

A post that looks into the specific challenges companies face regarding non-human identities in PCI DSS v4.0, and explores strategies to overcome them.   #defend

How to set up AWS CodeBuild for GitHub Action Runners, including configuration steps and integration advantages.   #aws   #build   #ci/cd

A (now remediated) vulnerability allowed the Reader role on the AML service to gain write access to these Storage Accounts to ultimately get code execution through Jupyter notebooks.   #attack   #azure

Using a reusable monitoring workflow, rekor-monitor can periodically and automatically verify both the consistency of a log and search for any found identities.   #ci/cd   #defend   #supply-chain

This chatbot functions as an illustration of the capabilities of Amazon Bedrock to convert natural language into Amazon Athena queries and to process and utilize complex data sets.

An IAM Simulator that outputs detailed explains of how a request was evaluated.

Etcd-k8s-extract takes in an etcd data directory or db file used in kubernetes, extracts the kubernetes resources and then writes the resources to disk in yaml format.

A fast, feature-rich, and cross-platform terminal emulator that uses platform-native UI and GPU acceleration.

This new course is designed to help security professionals, architects, and artificial intelligence and machine learning (AI/ML) engineers understand and implement security best practices for generative AI applications and models in the AWS Cloud.

How to tailor your unused access analyzer to your needs by excluding specific accounts and IAM roles.

A deep dive into Amazon GuardDuty Runtime Monitoring for EC2 instances and key capabilities that are part of the feature.

How to extract OU structure and account metadata from your organization and use it to securely share Security Lake data on a per-OU basis across your organization.

Get an inside look at Google's approach to modern threat detection and response, part of their new "How Google Does It" series.