How the Square Security team built Kubernetes security guardrails using OPA, ensuring innovation stays fast, flexible, and secure at scale.   #defend   #kubernetes   #opa

How AWS VPC Endpoint CloudTrail logs can help you troubleshoot endpoint policies and strengthen your network's security against data exfiltration.   #aws   #defend   #monitor

Even small misconfigurations in role trust policies can unintentionally create critical privilege escalation risks in AWS, such as allowing low-privileged users to assume admin roles.   #aws   #defend   #iam

Post diving into publicly known SNS abuse attempts and Elastic's knowledge of the data source to develop detection capabilities.   #aws   #monitor

A Path Traversal vulnerability found in the AWS Systems Manager (SSM) Agent, specifically within the ValidatePluginId function of the pluginutil.go file.   #attack   #aws

Making a dynamic DNS client with aws and jq CLI, with a least-privilege IAM role and a SystemD service.   #aws   #iam

Another example of how attackers can abuse legitimate AWS services for persistence.   #attack   #aws   #ci/cd

Database diagrams editor that allows you to visualize and design your DB with a single query.

Declarative configuration for Gmail filters.

Free, simple, fast interactive diagrams for any GitHub repository.

A suite of tools to enumerate, evaluate and visualise the access conditions between different resources.

A security scanning tool for MCP servers.

Post covering topics such as centralized security tooling, automated AWS Config rule deployment, custom remediation using Lambda and AWS Systems Manager, tagging-based exception handling, and comprehensive compliance reporting and visibility.