This week's articles
Announcing OpenCSPM - An Open-Source Cloud Security Posture Management and Workflow Platform
#aws, #gcp, #defend, #announcement
is an open-source platform developed by Darkbit that aims to make continuous cloud security posture assessments of cloud environments a practical reality for security and compliance teams alike. It offers a unique approach to manage the firehose of security and compliance check results that even modest AWS and GCP environments can surface, and its control definitions allow for simple yet powerful levels of introspection of its graph data model.
Blind Spots in the Cloud
#aws, #gcp, #defend
High-level post reviewing logging and visibility options offered by AWS and GCP, and discussing blind spots and how to eliminate them.
Announcing HashiCorp Vault 1.6
This release features Integrated Storage enhancements, a new Key Management Secrets Engine, Transform Secrets Engine updates, and more.
How to monitor coreDNS
How to monitor coreDNS: how to get metrics out of it, and what to look for.
CloudGoat ECS_EFS_Attack Walkthrough
Walkthrough covering the CloudGoat attack simulation "ecs_efs_attack", teaching how to pivot through AWS Elastic Container Service and gain access to AWS Elastic File Share.