The ramblings of Ian Mckay, a DevOps dude from Australia
For a decade, I have been working with AWS and third-party security teams to resolve bucketsquatting / bucketsniping issues in AWS S3. Finally, I am happy to say AWS now has a solution to the problem, and it changes the way you should name your buckets.
Last month, Seth Art from Datadog Security Labs published an excellent post on AWS cloud image confusion attacks. In this post, I'll explain how Azure has a similar issue with its CLI.
It's pre:Invent season, and one of the most consequential identity and access management features was just released by the identity team at AWS. Resource Control Policies, a strong tool for establishing data perimeters, is now available for organization administrators.
The AWS Client VPN service is a common way to seamlessly connect users into internal networks. In this post, I describe a low-tech, low-cost solution to better authenticate users using a second factor.
HTTPS Endpoints was one of my favourite re:Invent 2023 announcements. I talk about it and other interesting things you can achieve within your state machines in this post.
In 2021, AWS WAF introduced a new CAPTCHA feature to help protect sites against bot traffic. In this post, I walk through my methodology for beating the CAPTCHA challenges programmatically.
More and more engineers are considering integrating Cedar into their own systems for authorization, but what do policy authors need to consider to avoid unexpected outcomes? In this post, I'll walk through my experiences in where policy authoring can go wrong and the steps you can take to overcome these issues.
Today, AWS has released Amazon VPC Lattice to General Availability. This post walks through creating a simple VPC Lattice service using CloudFormation, and takes a look at the service overall.
Cedar is a new language created by AWS to define access permissions using policies, similar to the way IAM policies work today. In this post, we'll look at why this language was created, how to author the policies, and some additional features of the language.
The AWS JavaScript SDK supports Node.js, React Native and web browsers, but what if you're running in a service worker? In this post, I'll explain how I modified version 2 of the AWS JavaScript SDK to run within a service worker context.