Writing an IAM Policy That's Actually Least Privilege
Where I got the boundary right, and where my own policy is looser than it should be
Aug 15, 202611 min read8
Command Palette
Search for a command to run...
Latest articles
Writing an IAM Policy That's Actually Least Privilege
Where I got the boundary right, and where my own policy is looser than it should be
Aug 15, 202611 min readIAM Roles Anywhere: AWS Access With Zero Static Keys
How a Raspberry Pi calls AWS with an X.509 certificate and no access keys
Aug 13, 20268 min read16IAM Roles Anywhere: AWS Access With Zero Static Keys
How a Raspberry Pi calls AWS with an X.509 certificate and no access keys
Aug 13, 20268 min readIAM Roles Anywhere: AWS Access With Zero Static Keys
How a Raspberry Pi calls AWS with an X.509 certificate and no access keys
Aug 13, 20268 min readAWS Security Agent: Pentesting and Threat Modeling On Demand
What it actually does, what it costs, and whether it's worth setting up for your repos
Jun 28, 20268 min read15Three Security Checks for Any AWS Pipeline
gitleaks, checkov, and ECR Enhanced Scanning. What they catch and how to add them.
Jun 20, 20267 min read10Responding to a Compromised AWS Access Key
A practical playbook when AWS documentation isn't enough
Jun 14, 20268 min read3Detect, Alert, Search: The SIEM You Already Have on AWS
You already run the services. This is how you wire them.
Jun 7, 202610 min read47