securiy

4 ms·

1.
by securiy 3y ago
Crap, I didn't know these acronyms before either and now I've turned into a Gartner shill :sob:
2.
by securiy 3y ago
IAM users are still needed in large orgs because of legacy tooling that only accepts access key ID / secret access key sigh .
3.
Cleaning Up Dead Bodies in AWS IAM(noq.dev)
42 points by securiy 3y ago|56 comments
4.
Track AWS IAM Changes in Git with CloudTrail Attribution(noq.dev)
3 points by securiy 3y ago|1 comments
5.
by securiy 3y ago
I wanted to share a recent blog post we've put together on creating an IAM Audit Trail with IAMbic (www.github.com/noqdev/iambic) with support for Cloudtrail logging and attribution. If you've ever found IAM changes in A
6.
by securiy 3y ago
Full disclosure: I'm one of the authors of the tool mentioned in the video, IAMbic. The premise: Cloud IAM can get messy as your organization scales and you need to enforce compliance and security policies. Existing tools are often sil
7.
You need this FREE IAM Management Tool [video](youtube.com)
4 points by securiy 3y ago|1 comments
8.
SCPs: Protecting Your AWS Environment (and your job)(old.reddit.com)
2 points by securiy 3y ago|1 comments
9.
by securiy 3y ago
Hello everyone! We are working on an open-source IAM-as-code solution called IAMbic, and recently added AWS Service Control Policy support (AWS guardrails, typically used for compliance) seen in the attached blog. IAMbic represents your IAM
10.
Tailor AWS Identity Center (SSO) Permissions per Account with IAMbic(noq.dev)
4 points by securiy 3y ago|1 comments
11.
by securiy 3y ago
Hey everyone. I wrote a blog post for those of us that might struggle to manage permissions in AWS Identity Center (SSO), and who find that existing tooling like Terraform and CloudFormation lack visibility into your actual IAM state, and r
12.
AWS Permission Bouncers: Letting Loose in Dev, Keeping It Tight in Prod(noq.dev)
4 points by securiy 3y ago|1 comments
13.
by securiy 3y ago
Struggling with AWS config changes taking down prod services? Wish to give more permissions in dev/test but less in prod? Check out this blog on IAMbic an open-source tool to tame multi-account AWS IAM chaos
14.
by securiy 3y ago
Hey everyone, I'm Curtis. I’m excited to announce the open-source launch of IAMbic (IAM, but in code), a multi-cloud control plane that simplifies IAM management in a GitOps workflow. It’s like Terraform for Cloud IAM, but way easier.
15.
IAMbic: Multi-Cloud IAM-as-Code(iambic.org)
9 points by securiy 3y ago|1 comments
16.
Improving AWS database security with ConsoleMe(medium.com)
2 points by securiy 5y ago|0 comments
17.
by securiy 6y ago
I considered writing it in Go, but my team is Python-centric. Tornado was chosen back in 2018 because it was one of the better fully featured async web frameworks. The original ConsoleMe was server-side rendered, and Tornado offered support
18.
ConsoleMe: A Central Control Plane for AWS Permissions and Access(netflixtechblog.com)
1 points by securiy 6y ago|0 comments