CloudSec Wine

🔶AWS Identity and Access Management introduces IAM Roles Anywhere for workloads outside of AWS

IAM Roles Anywhere allows your workloads such as servers, containers, and applications to use X.509 digital certificates to obtain temporary AWS credentials and use the same IAM roles and policies that you have configured for your AWS workloads to access AWS resources.

https://aws.amazon.com/ru/about-aws/whats-new/2022/07/aws-identity-access-management-iam-roles-anywhere-workloads-outside-aws

#aws

🔶Amazon Cognito - A Complete Beginner Guide

Great guide by Daniel at Be A Better Dev explaining the core concepts of Cognito from a beginner perspective. You’ll learn about User Pools, Identity Pools/Federated Identities, and how to tie them together.

https://beabetterdev.com/2022/06/26/amazon-cognito-a-complete-beginner-guide

#aws

🔶turbot/steampipe-mod-aws-perimeter

An AWS perimeter checking tool that can be used to look for resources that are publicly accessible, shared with untrusted accounts, have insecure network configurations, and more, by Steampipe.

https://github.com/turbot/steampipe-mod-aws-perimeter

#aws

🔶Building AWS Security Guardrails

Kinnaird McQuade joins Ashish Rajan on the Cloud Security Podcast to discussing building AWS security guardrails that prevent classes of bugs, scaling guardrails, the difference between preventative and detective security controls, and more.

https://www.youtube.com/watch?v=jW-LkpVvsLk

#aws

🔷 Kubernetes Workload Identity with AKS

Post explaining how workload identity federation on AKS works, and how to set it up.

https://blog.baeke.info/2022/01/31/kubernetes-workload-identity-with-aks

#azure

🔶🔷🔴 The Open Cloud Vulnerability & Security Issue Database

An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues.

https://www.cloudvulndb.org

#aws #azure #gcp

🔷Sky's the Limit: Stratus Red Team for Azure

A write-up on using Stratus Red Team for testing threat detection rules.

https://blog.detect.dev/posts/azure_for_stratus.html

#azure

🔶CloudGoat Scenario: Avoiding AWS Security Detection and Response

This will walk through the CloudGoat AWS detection_evasion scenario, detailing how to avoid AWS security detection and response services, such as in Lambda.

https://rhinosecuritylabs.com/cloud-security/cloudgoat-detection_evasion-walkthrough

#aws

🔷FabricScape: Escaping Service Fabric and Taking Over the Cluster

FabricScape (CVE-2022-30137) is a privilege escalation vulnerability in Microsoft's Service Fabric, which allowed cross tenant root access built out of unprivileged processes.

https://unit42.paloaltonetworks.com/fabricscape-cve-2022-30137

#azure

🔴 Google Cloud Security Overview

A bird's eye view of the Google Cloud Security Services, illustrated via sketchnotes.

https://cloud.google.com/blog/topics/developers-practitioners/google-cloud-security-overview

#gcp

🔷Establish security boundaries in your on-prem AD and Azure environment

A high-level explanation of how to implement security boundaries in an on-prem AD and Azure environment to protect your critical assets based on the principle of tiered administration, including how BloodHound can help you in the process.

https://posts.specterops.io/establish-security-boundaries-in-your-on-prem-ad-and-azure-environment-dcb44498cfc2

#azure

🔶Anatomy of an Attack: Exposed keys to Crypto Mining

Blog detailing the activity associated with a low sophistication crypto mining incident caused by exposed keys.

https://permiso.io/blog/s/anatomy-of-attack-exposed-keys-to-crypto-mining

#aws

🔶🔷🔴 Cloud Risk Encyclopedia

1200+ cloud security risks, 3 cloud platforms, 47 compliance frameworks, 18 risk categories, 4 risk levels.

https://orca.security/resources/cloud-risk-encyclopedia

#aws #azure #gcp

🔷Office 365 Functionalities that can Ransom Files

Proofpoint has discovered a potentially dangerous piece of functionality in Office 365 that allows ransomware to encrypt files stored on SharePoint and OneDrive.

https://www.proofpoint.com/us/blog/cloud-security/proofpoint-discovers-potentially-dangerous-microsoft-office-365-functionality

#azure

🔶AWS IAM Security Best Practices

A post going through a few top rules and best practices in AWS IAM.

https://blog.gitguardian.com/aws-iam-security-best-practices

#aws

🔶 Unwanted Permissions that may impact security when using the ReadOnlyAccess policy in AWS

With this analysis, Tempest researchers identified at least 41 actions that can lead to improper data access.

https://sidechannel.blog/en/unwanted-permissions-that-may-impact-security-when-using-the-readonlyaccess-policy-in-aws

#aws

🔴 Incident report: Spotting an attacker in GCP

A walk through of how an attacker gained access to a customer's GCP environment, Expel's investigative process, and some key takeaways for securing your organization.

https://expel.com/blog/incident-report-spotting-an-attacker-in-gcp

#gcp

🔷 SynLapse - Technical Details for Critical Azure Synapse Vulnerability

This blog describes the technical details of SynLapse, a critical Synapse Analytics vulnerability in Microsoft Azure which allowed attackers to bypass tenant separation.

https://orca.security/resources/blog/synlapse-critical-azure-synapse-analytics-service-vulnerability

#azure

🔶🔷🔴 The cloud gray zone: secret agents installed by cloud service providers

Wiz Research details how cloud middleware use across cloud service providers can expose customers' virtual machines to new attack vectors.

https://www.wiz.io/blog/the-cloud-gray-zone-secret-agents-installed-by-cloud-service-providers

#aws #azure #gcp

🔴 An Easy Misconfiguration to Make: Hidden Dangers in the Cloud Control Plane

The biggest risk in cloud development is not recognizing the differences between cloud and traditional definitions of common architecture terms.

https://www.mitiga.io/blog/misconfiguration-hidden-dangers-cloud-control-plane

#gcp