# Stopping S3 Data Exfiltration in Real Time: A Step-by-Step Incident Response
The Scenario An EC2 instance with an attached IAM role has s3:GetObject on a bucket containing sensitive data. An attacker compromises the instance,…
Последние новости
⚑ Сообщить о проблемеTech news from the best sources
Все темы
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
database
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
My First Time Putting an App on AWS (A Beginner's Story)
Today I did something I've wanted to do for a while — I took an app running on my own laptop and put it "live" on the internet using AWS. It sounds…
AWS IAM Least Privilege Without Losing Your Mind
Least privilege is the IAM principle everyone agrees with and few actually implement, because doing it by hand is tedious and "Action": "*" always w…
Writing an IAM Policy That's Actually Least Privilege
I wrote the IAM policy for my solar agent myself, on the first try, thinking I had done it right. I had not, entirely. The agent behind the last art…
Why Read-Only Is the Only Safe Way to Let AI Near Your AWS Account
Every AWS cost tool eventually asks you for the same terrifying thing: an IAM role. And every vendor says the same reassuring word about it: "read-o…
Same AWS Error, Two Answers: I Built a Tool That Stops Guessing at IAM
Ciao Amici 👋 Let me start with a confession. Every time I hit an AccessDenied in AWS, I do the same lazy thing you do. I copy the wall of text, past…
Rotate AWS IAM Access Keys by script
Update (2026): This article documents a legacy approach and is preserved for historical and educational purposes. AWS now recommends temporary crede…
100 Days of DevOps and Cloud (AWS), Day 16: A Load Balancer in Ten Lines of Nginx, and Least-Privilege IAM
You do not need a cloud load balancer to load balance. Ten lines of Nginx will spread traffic across a pool of servers, and understanding those ten…
How to Stop Using Access Keys and Keep Them from Leaking
This article was translated with the help of AI. Are you issuing access keys just to use the AWS CLI? I used to do exactly that. Access keys are con…
5 IAM Condition Keys That Prevent the Mistakes Wildcards Create
5 IAM Condition Keys That Prevent the Mistakes Wildcards Create An IAM policy with Action: "s3:*" and Resource: "*" is an obvious problem. You can s…
The Hidden Cost of Manual IAM Review
The Hidden Cost of Manual IAM Review Most teams don't track how long they spend reviewing IAM policies. When I started measuring it on my own team,…
The Design Layer and Your Security Stack: A Practical Integration Guide
The governance layer is well-built. The detection layer is well-funded. The design layer is the upstream question neither answers — and it is comple…
IAM Access Analyzer Lied to Us: The $1,000/Month Overprovisioning Mistake
A month ago, we thought we'd solved our access control issues with IAM Access Analyzer. But a closer look revealed a staggering overprovisioning pro…
Stop Using IAM Access Keys: Secure Cross-Cloud Workloads with OIDC Federation
As developers and DevOps engineers, we’ve all been there. You have an external service—maybe an Azure Dynamics 365 (D365) business application or a…
AWS IAM Deep Dive
Introduction Every action on AWS goes through an HTTPS API, and IAM (Identity and Access Management) sits in front of every single one of them . Onc…
The Architecture You Did Not Design: How AWS' Real Lock-In Lives in IAM, Not Egress
In the Net, Episode 03 In March 2024 AWS announced that it would waive data-egress fees for customers wishing to leave. The press release was elegan…
Authorization and Authentication in AWS
Hey do you know how authorization and authentication works in AWS. It is a first step to ensure control access to resources and actions that you can…