Conference Talk (fwd:CloudSec 2026): What Building an AI Worm Taught Us About Stopping One
Related reading: Pwning AWS AgentCore Code Interpreter on the BeyondTrust blog.
Kinnaird's Blog
Kinnaird's Blog
Latest posts
Conference Talk (BSides SF 2026): Pwning and Defending AI Agent Code Interpreters
Related reading: Pwning AWS AgentCore Code Interpreter on the BeyondTrust blog.
Pwning AWS AgentCore Code Interpreter
Pwning AgentCore Code Interpreter
Overview AWS Bedrock AgentCore Code Interpreter’s “Sandbox” network mode is supposed to be walled off from the internet. It isn’t. Despite a “no external network access” configuration, the sandboxed interpreter can still issue A and AAAA DNS queries — and that’s enough to smuggle a full command-and-control channel out of the sandbox. This project documents…
Cloud Security Podcast Interview: Building & Scaling AWS Security Guardrails
Cloudsplaining and Checkov: Identify AWS IAM least privilege violations from code to cloud
OWASP Guest Speaker: Cloud Security Tooling for the Sole Practitioner
Using CloudQuery to Identify Public Network Endpoints in AWS
Queries for identifying public network endpoints You can try creating these in the CloudQuery portal . API Gateways CloudFront Distributions EC2 instances with Public IPs ElasticSearch ElastiCache ELB Classic ELBv2 EMR Redshift RDS The following resources are not supported today by CloudQuery, but are coming soon: Elastic IPS that are not attached to EC2 Instances ElastiCache Global Accelerator…
Scheduling Prowler Security scans in AWS
Prowler is a command line tool that helps with AWS security assessments. It has a lot of security checks covering a lot of different areas. You can run Prowler from your laptop, from EC2, Fargate, CodeBuild, CloudShell, and others. This tutorial will cover setting up Prowler scans to be run on a weekly basis from CodeBuild and provisioned via Terraform. It sets up AWS Security Hub in your account…
Conference Talk (fwd:CloudSec 2021): Security Guardrails at Scale in Azure
Metabadger
Azure Guardrails
Checkov
Endgame
Sensitive AWS API Calls That Return Credentials and Data
This morning, I was reading about how to link up AWS Chatbot to Slack . For one, I thought it would be cool to do this myself, and two, I thought about the potential for using Slack as an attack vector. While reading the documentation, I saw that AWS has anticipated the potential to abuse AWS via Slack to some extent and designed accordingly. They have some limitations to running AWS CLI commands…
Nuking All Azure Resource Groups Under All Azure subscriptions
The code You can copy the script below as a one-liner: The Terraform code is also here: Overview In Microsoft Azure, Resource Groups are logical containers that are directly linked to their resources. If you want to delete your resources, just right click on the resource group poof ! The resources are gone. This is a breath of fresh air compared to the asset inventory, visibility, and cleanup…
Lessons From The Maintainers of Python, Django, and Cloudsplaining
You may have heard that we are producing an Accidental Maintainer series, a collection of interviews and resources to help open source maintainers navigate difficult decisions in unfamiliar territory. The first subject we’re tackling in this series is that of open source project governance. Before we start, let’s first discuss the most important question… what is governance? Governance is the…
Open Source: An Interview with Salesforce Engineering
Cloudsplaining and Policy Sentry are fairly new project, so let’s first discuss what these projects do. Policy Sentry is an AWS IAM Least Privilege Policy Generator, auditor, and analysis database. It can be used by organizations to limit the blast radius in the event of a breach and scale creation of secure IAM policies. Clousplaining identifies violations of least privilege in AWS IAM and…
Conference Talk (Salesforce SHIFT): Preventing Systemic Security Issues
Conference Talk (fwd:CloudSec 2021): Limiting Blast Radius by Automating IAM Policies using Policy Sentry
Podcast Interview (Stelligent): Open Sourcing AWS IAM Security tools
Cloudsplaining
How I Quit Nicotine Without Having Any Cravings
On September 22nd, 2019, I quit vaping. On October 20th, 2019, I quit nicotine altogether. I’d say that quitting was one of the Top 10 most emotionally challenging situations I’ve faced in my life. And if you know my personal backstory, that is no small matter. Most of the advice out there on quitting nicotine really, really sucks. Some “quit smoking” programs seem to take forever. The…
Building Secure AWS AMIs: Building hardened CentOS AMIs from scratch
In this tutorial, we cover building the prerequisite infrastructure to create EC2 AMIs from scratch, how to use the example hardening scripts for CentOS, and how to validate the testing with Amazon Inspector. 1: Prerequisites First, download the code: https://github.com/kmcquade/building-secure-aws-amis-blog-series.git git clone https://github.com/kmcquade/building-secure-aws-amis-blog-series.git…
Policy Sentry
See the project here: https://github.com/salesforce/policy_sentry Policy Sentry allows users to create least-privilege IAM policies in a matter of seconds, rather than tediously writing IAM policies by hand. These policies are scoped down according to the proper access levels, and only to the exact resources that your role needs access to. In the case of a breach, this helps to limit the blast…
Automating Least Privilege in AWS IAM with Policy Sentry
Intro The Salesforce Security Assurance team would like to share a tool that we recently published called Policy Sentry , which helps to automate the creation of least privilege IAM policies in Amazon Web Services (AWS) environments. Policy Sentry allows users to create least-privilege IAM policies in a matter of seconds, rather than tediously writing IAM policies by hand. These policies are…