Amazon Web Services

As a software developer, you're constantly in demand... and being demanded to le...

Least Privilege, IAM Groups, and IAM Strategy

Permits connection from only a specific public IP range

Grant n AWS accounts, any principal, to connect to ECR resource and upload image...

Grant n other accounts access to this ECR, account-wide. Use more specific princ...

Policy for principal (User, Service) to access cross-account secret and KMS CMK...

For public access, permit only specific CloudFront distribution

IAM assume role trust policy which permits assuming only from specific role(s)

In this video we'll build a container image with docker, test it, and push it to...

A walkthrough of AWS's container image hosting resource Elastic Container Regist...

A walk through on how to evaluate cloud environments and secure them using Ident...

Walk through assuming a different IAM role with STS assume with us

This video walks you through everything you need to know about AWS ECS

An introductory primer on what AWS STS Assuming is and why you should be using i...

Use this graphic and write-up to upskill on AWS ECR super fast. You'll know enou...

Level up on AWS Secrets Manager, IAM, and learn to store and manage secrets

Level up on AWS KMS, IAM, and learn to secure AMK (AWS) and CMK (Client managed)...

High quality and independent AWS content from Andreas and Michael Wittig.

Assume AWS IAM roles from GitHub Actions workflows with no stored secrets

Security summaries and snark by the infamous Corey Quinn

Unauthenticated enumeration of services, roles, and users in an AWS account or i...

IAM Least Privilege Policy Generator

This tool is designed to prevent the deployment of unwanted IAM identity-based a...