bnchandrapal

6 ms·

1.
Never Trust Your AI Agent's Own Sandbox(badshah.io)
3 points by bnchandrapal 2mo ago|0 comments
2.
How 'What Can Go Wrong?' Went Wrong(badshah.io)
2 points by bnchandrapal 10mo ago|0 comments
3.
by bnchandrapal 1y ago
TL;DR: Add MFA to AWS root user. If you don't have MFA with root AND your email server of root email is hosted in same AWS account, it gets tricky to recover. Sidenote, I was shocked to see "There was an AWS keypair saved in the C
4.
AWS Product Lifecycle: End of Life Information(aws.amazon.com)
2 points by bnchandrapal 1y ago|0 comments
5.
Setting Up a Cloud Security Roadmap for Your Startup(awssecuritydigest.com)
4 points by bnchandrapal 1y ago|0 comments
6.
Tailpipe – open-source SIEM for instant log insights, powered by DuckDB(github.com)
5 points by bnchandrapal 2y ago|0 comments
7.
by bnchandrapal 2y ago
Yes, you're right. Reading my statement in hindsight shows thats not correct. My intention was to convey that you can check for the existence of common IAM users and roles in the accounts (and even existence of company specific entitie
8.
Well, it's just an AWS Account ID(mail.cloudsecurity.club)
106 points by bnchandrapal 2y ago|33 comments
9.
by bnchandrapal 3y ago
https://badshah.io/ Blog posts on Cloud Security, DevSecOps and other personal experiments+experiences in security RSS: https://badshah.io/index.xml
10.
My Love/Hate Relationship with Cloud Custodian(badshah.io)
1 points by bnchandrapal 3y ago|0 comments
11.
One important feature that Dependabot is missing(badshah.io)
2 points by bnchandrapal 4y ago|0 comments
12.
Automating Cloud Security – AWS Edition (Workshop Slides) [pdf](badshah.io)
3 points by bnchandrapal 4y ago|0 comments
13.
Did you completely remove secrets from Git repository? Really?(badshah.io)
2 points by bnchandrapal 4y ago|0 comments
14.
by bnchandrapal 4y ago
Ahhh. AWS Control tower has not cost but it requires AWS Config to be enabled. Config is yet another AWS service that can get costly over time (if continuous monitoring of changes is enabled)
15.
by bnchandrapal 4y ago
Out of curiosity, did you have any data lakes on S3? Did you find optimization techniques for the same?
16.
by bnchandrapal 4y ago
There are a few AWS security services which are free/priced reasonably. Some free services: 1. AWS Org (Disable services and enforce guardrails) 2. VPC (Create private networks) 3. IAM (User access and IAM policy analyzer to help with
17.
AWS GuardDuty – the Good, the Bad, and the Ugly(badshah.io)
132 points by bnchandrapal 4y ago|56 comments
18.
What should you use – CloudQuery or Steampipe?(badshah.io)
1 points by bnchandrapal 4y ago|0 comments
19.
Things I wish I knew about AWS WAF – Bot Control(badshah.io)
1 points by bnchandrapal 4y ago|0 comments
20.
What's happening in the Burp-verse – Issue #11(newsletter.burpsuite.guide)
1 points by bnchandrapal 4y ago|0 comments
21.
WordPress Plugin Confusion: How an update can get you pwned(vavkamil.cz)
3 points by bnchandrapal 5y ago|0 comments
22.
Awesome Security Gists: Curated List of Cool GitHub Gists Related to Security(github.com)
2 points by bnchandrapal 9y ago|0 comments
23.
Latest BlackHat Arsenal USA 2017 Tools and Their GitHub Repositories [UPDATED](medium.com)
2 points by bnchandrapal 9y ago|0 comments
24.
Latest BlackHat Arsenal USA 2017 Tools and Their GitHub Repositories(medium.com)
1 points by bnchandrapal 9y ago|0 comments
25.
What is “Hack with GitHub”?(medium.com)
1 points by bnchandrapal 9y ago|0 comments
26.
(Ab)Using Facebook Accessibility for Open Source Intelligence(medium.com)
1 points by bnchandrapal 9y ago|0 comments