I made a thing. Assume AWS IAM roles from GitHub Actions. Now I can use the best CI solution with the best cloud and not have to create IAM users.
The role sessions are even tagged with repo, SHA, run numbers, etc for much saner CloudTrail trawling.
github.com/glassechidna/a…
269
40Feb 28 · 5:50 AM
So last night I passed the AWS Machine Learning - Specialty exam 😃
That was a tough one! 😅
For anyone interested in AI/ML I would encourage you to study for it 📚 I learnt a ton and liked how a large % of the exam was focused on general ML knowledge vs the AWS services.
1534Feb 26 · 10:50 AM
☁️ Security Logging in Cloud Environments
@lancinimarco: Designing a state of the art multi-account security-related logging platform
Covers:
* CloudTrail, CloudWatch, GuardDuty, Config
* Collecting logs
* Storage & audit trail
* Monitoring & alerting
marcolancini.it/2021/blog-secu…
10430Feb 23 · 5:00 PM
Thursday night: Wine 🍷 and PR-FAQing 📄Me thinks this will make for a pretty awesome doc.
700Feb 26 · 4:23 AM
In a new blog post we review downloading and exploring EBS snapshots using the EBS Direct API's. Snapshot download isn't logged in CloudTrail, making this a difficult attack to detect. bit.ly/3qXWgAz
2915Feb 26 · 6:23 PM 🤬 Damn Vulnerable @GraphQL App by Dolev Farhi
Get hands-on experience exploiting a GraphQL app, including:
* Denial-of-service
* Info disclosure
* Code execution
* Injection
* Authorization bypass
* and more
#bugbountytips
github.com/dolevf/Damn-Vu…
288Feb 23 · 7:00 PM
Spending my Saturday night reviewing CFP submissions for the @CloudNativeFdn Cloud Native Security Day 2021. There's still time to register! events.linuxfoundation.org/cloud-native-s…
213Feb 27 · 9:45 PM Just spent 30mins troubleshooting why aws-cdk was not installing properly. Turns out I was installing aws-sdk 🤦♂️😂 #Fridays
172Feb 26 · 5:13 PM
"When seconds matter, CloudTrail takes minutes"
CloudTrail could be a database too. I would think that the ~20 minute delay between "thing happens" and "it shows up in the logs" would be a blocker, but people still use Bitcoin so...
134Feb 26 · 6:18 PM
This is a great diagram showing how the various AWS security services interact marcolancini.it/2021/blog-secu… thanks @lancinimarco, this belongs in the official docs!
113Feb 25 · 10:16 PM If you're using Amazon Cognito, you should watch this short (but great) summary of how to do it securely: youtube.com/watch?v=QDR-pX…
Slowly working my way through the #AWS re:Invent 2020 catalogue, let me know if you've got recommendations!
93Mar 01 · 1:46 AMThere are definitely some times that you want to query across all regions in the CLI. I always have done this in the past by piping together a bash loop and some jq like this:
for region in `aws ec2 describe-regions --output text | cut -f4`
do
echo -e "\nListing …Hello,
Early on in my career I had a job as an IT consultant (not AWS related).
I enjoyed it because:
Hi everyone,
I have the opportunity to take training in Cyber and I'm wondering - what cloud-related training would be most ideal for someone in a senior leadership / c-suite role?
Thanks in advance!