Amazon

Advanced Techniques for Defending AWS ExternalIDs and Cross-Account AssumeRole Access

Advanced Techniques for Defending AWS ExternalIDs and Cross-Account AssumeRole Access

By Rich Mogull|2020-07-14T09:33:36-05:00July 14th, 2020|

Advanced Techniques for Defending AWS ExternalIDs and Cross-Account AssumeRole AccessLast

AWS Security Management with SecurityHub

AWS Security Management with SecurityHub

By Jody Brazil|2020-06-25T14:48:13-05:00June 25th, 2020|

AWS Security Management with SecurityHub Security has been a top

Don’t Start Static – Mitigating Cloud API Credential Exposure

Don’t Start Static – Mitigating Cloud API Credential Exposure

By Rich Mogull|2020-05-06T13:04:08-05:00March 23rd, 2020|

Don’t Start Static – Mitigating Cloud API Credential

The Overly Complex Way CloudTrail and CloudWatch Events Work Together

The Overly Complex Way CloudTrail and CloudWatch Events Work Together

By Rich Mogull|2020-02-18T09:38:02-06:00February 17th, 2020|

The Overly-Complex Way CloudTrail and CloudWatch Events Work

How to make the most out of AWS Guard Duty

How to make the most out of AWS Guard Duty

By Rich Mogull|2020-02-10T11:56:10-06:00February 10th, 2020|

This week, Amazon Web Services announced updates

SSRF Defense Step 3: Eliminate Excessive IAM Data Access Permissions

SSRF Defense Step 3: Eliminate Excessive IAM Data Access Permissions

By Matt Dean|2019-10-16T09:43:13-05:00October 15th, 2019|

SSRF Defense Step 3: Eliminate Excessive IAM Data Access PermissionsThe

SSRF Defense Step 2: Manage IAM Role Location Restrictions

SSRF Defense Step 2: Manage IAM Role Location Restrictions

By Matt Dean|2019-10-15T20:17:01-05:00October 3rd, 2019|

SSRF Defense Step 2: Manage IAM Role Location Restrictions

Yes, Finding Public S3 Buckets is Automated and Easy

Yes, Finding Public S3 Buckets is Automated and Easy

By Matt Dean|2019-09-10T15:16:50-05:00September 9th, 2019|

Yes, Finding Public S3 Buckets Is Automated and Easy Attackers

What You Need to Know About AWS Security Monitoring, Logging, and Alerting

What You Need to Know About AWS Security Monitoring, Logging, and Alerting

By Rich Mogull|2019-09-25T18:37:18-05:00August 26th, 2019|

What You Need to Know About AWS Security Monitoring,

Breaking Attacker Kill Chains in AWS: IAM Roles

Breaking Attacker Kill Chains in AWS: IAM Roles

By Rich Mogull|2019-09-25T18:59:17-05:00August 2nd, 2019|

Over the past year I’ve seen a huge