One Cloud Please

For a decade, I have been working with AWS and third-party security teams to resolve bucketsquatting / bucketsniping issues in AWS S3.

Last month, Seth Art from Datadog Security Labs published an excellent post on AWS cloud image confusion attacks.

It’s pre:Invent season, and one of the most consequential identity and access management features was just released by the identity team at AWS.

The AWS Client VPN service is a common way to seamlessly connect users into internal networks, however administrators often need ways to ensure a heightened level of security considering the attack surface.

AWS re:Invent 2023 is now behind us and one of my favourite announcements was the introduction of HTTPS Endpoints to AWS Step Functions.

In 2021, AWS WAF introduced a new CAPTCHA feature to help protect sites against bot traffic.

With the open-source release of the Cedar engine and the general availability release of Amazon Verified Permissions, more and more engineers are considering integrating Cedar into their own systems for authorization, but what do policy authors need to co…

(yes, that is a picture of my breakfast) Today, AWS has released Amazon VPC Lattice to General Availability.

Cedar is a new language created by AWS to define access permissions using policies, similar to the way IAM policies work today.

The AWS JavaScript SDK supports Node.js, React Native and web browsers, but what if you’re running in a service worker?