IdP Logout in an SPA
Sequence Confirm and quiesce. The user confirms logout. The shell first instructs every embedded child application to log itself out and waits until…
AI & ML
⚑ Сообщить о проблемеПоследние новости AI & ML от Tech News
Все темы
AI
News
Tech
agents
ai
api
architecture
automation
backend
beginners
career
claude
database
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
Your Agent Should Not Borrow Your API Key
Give the agent its own key, make that key smaller than yours, and let it expire. A borrowed key turns every prompt injection into a call made with y…
SCIM Endpoint Security: How to Lock Down a Provisioning API Before It Leaks Your Directory
A SCIM endpoint is a REST API that can list, create, modify and disable every identity in your directory, and it is usually protected by one long-li…
Introducing IdentiFlows.dev: A Visual Reference for Identity Flows
Every developer who has played with OAuth 2.0 or OpenID Connect knows this moment: you need to double-check the exact sequence of a flow, and the di…
Bucket Access Policy: когда авторизацию возвращают в хранилище, а прокси выключают
У нас в публичном облаке VK Cloud у каждого бакета Object Storage есть Bucket Access Policy. Это набор правил в формате JSON, который лежит на самом…
Bucket Access Policy: когда авторизацию возвращают в хранилище, а прокси выключают
У нас в публичном облаке VK Cloud у каждого бакета Object Storage есть Bucket Access Policy. Это набор правил в формате JSON, который лежит на самом…
Bucket Access Policy: когда авторизацию возвращают в хранилище, а прокси выключают
Бакет в S3 — не просто папка для файлов, а ресурс, на котором хранилище принимает решение о доступе к объектам. Пока доступ контролирует только ngin…
# Stopping S3 Data Exfiltration in Real Time: A Step-by-Step Incident Response
The Scenario An EC2 instance with an attached IAM role has s3:GetObject on a bucket containing sensitive data. An attacker compromises the instance,…
Как мы тестировали отказоустойчивость MWS Cloud Platform и при чём тут швейцарский сыр
Всем привет! Я Андрей Халиуллин — руководитель направления IAM & Security Services в MWS Cloud Platform, и мы продолжаем делать облако. В этот р…
My First Time Putting an App on AWS (A Beginner's Story)
Today I did something I've wanted to do for a while — I took an app running on my own laptop and put it "live" on the internet using AWS. It sounds…
AWS IAM Least Privilege Without Losing Your Mind
Least privilege is the IAM principle everyone agrees with and few actually implement, because doing it by hand is tedious and "Action": "*" always w…
Writing an IAM Policy That's Actually Least Privilege
I wrote the IAM policy for my solar agent myself, on the first try, thinking I had done it right. I had not, entirely. The agent behind the last art…
Why Read-Only Is the Only Safe Way to Let AI Near Your AWS Account
Every AWS cost tool eventually asks you for the same terrifying thing: an IAM role. And every vendor says the same reassuring word about it: "read-o…
Same AWS Error, Two Answers: I Built a Tool That Stops Guessing at IAM
Ciao Amici 👋 Let me start with a confession. Every time I hit an AccessDenied in AWS, I do the same lazy thing you do. I copy the wall of text, past…
100 Days of DevOps and Cloud (AWS), Day 16: A Load Balancer in Ten Lines of Nginx, and Least-Privilege IAM
You do not need a cloud load balancer to load balance. Ten lines of Nginx will spread traffic across a pool of servers, and understanding those ten…
How to Stop Using Access Keys and Keep Them from Leaking
This article was translated with the help of AI. Are you issuing access keys just to use the AWS CLI? I used to do exactly that. Access keys are con…
5 IAM Condition Keys That Prevent the Mistakes Wildcards Create
5 IAM Condition Keys That Prevent the Mistakes Wildcards Create An IAM policy with Action: "s3:*" and Resource: "*" is an obvious problem. You can s…
The Hidden Cost of Manual IAM Review
The Hidden Cost of Manual IAM Review Most teams don't track how long they spend reviewing IAM policies. When I started measuring it on my own team,…
The Design Layer and Your Security Stack: A Practical Integration Guide
The governance layer is well-built. The detection layer is well-funded. The design layer is the upstream question neither answers — and it is comple…
IAM Access Analyzer Lied to Us: The $1,000/Month Overprovisioning Mistake
A month ago, we thought we'd solved our access control issues with IAM Access Analyzer. But a closer look revealed a staggering overprovisioning pro…
Stop Using IAM Access Keys: Secure Cross-Cloud Workloads with OIDC Federation
As developers and DevOps engineers, we’ve all been there. You have an external service—maybe an Azure Dynamics 365 (D365) business application or a…
AWS IAM Deep Dive
Introduction Every action on AWS goes through an HTTPS API, and IAM (Identity and Access Management) sits in front of every single one of them . Onc…
The Architecture You Did Not Design: How AWS' Real Lock-In Lives in IAM, Not Egress
In the Net, Episode 03 In March 2024 AWS announced that it would waive data-egress fees for customers wishing to leave. The press release was elegan…
Authorization and Authentication in AWS
Hey do you know how authorization and authentication works in AWS. It is a first step to ensure control access to resources and actions that you can…