Skip to content

DEV Community

Road to CloudSec LATAM Series' Articles

Back to Gerardo Castro Arica's Series

Cover image for I Deployed OpenClaw on AWS and Here's What I Found as a Cloud Security Engineer (Part 1)

OpenClaw Challenge Submission 🦞

Gerardo Castro Arica for AWS Heroes

Mar 5

I Deployed OpenClaw on AWS and Here's What I Found as a Cloud Security Engineer (Part 1)

#ai #openclawchallenge #devchallenge #openclaw

6 min read

Cover image for A 2018 Access Key. Still Active in Production. Here's the Python Script That Found It Across an Entire AWS Organization. Part 1

Gerardo Castro Arica for AWS Heroes

Mar 7

A 2018 Access Key. Still Active in Production. Here's the Python Script That Found It Across an Entire AWS Organization. Part 1

#aws #python #security #opensource

7 min read

Cover image for The script worked. The CISO needed something else. iam-audit v2: interactive dashboard, root account detection and Docker. Part 2

Gerardo Castro Arica for AWS Heroes

Mar 10

The script worked. The CISO needed something else. iam-audit v2: interactive dashboard, root account detection and Docker. Part 2

#aws #python #security #docker

8 min read

Cover image for I Kept Auditing OpenClaw on AWS Lightsail: 53 Default Skills, No Channel Access Controls, Deletable Logs (Part 2)

OpenClaw Challenge Submission 🦞

Gerardo Castro Arica for AWS Heroes

Mar 12

I Kept Auditing OpenClaw on AWS Lightsail: 53 Default Skills, No Channel Access Controls, Deletable Logs (Part 2)

#ai #openclawchallenge #devchallenge #openclaw

10 min read

Cover image for OpenClaw on AWS Lightsail — Threat Model Alignment: OWASP, MITRE ATLAS, and the Gap No Framework Anticipated (Part 3)

OpenClaw Challenge Submission 🦞

Gerardo Castro Arica for AWS Heroes

Mar 23

OpenClaw on AWS Lightsail — Threat Model Alignment: OWASP, MITRE ATLAS, and the Gap No Framework Anticipated (Part 3)

#openclawchallenge #devchallenge #ai #openclaw

12 min read

Cover image for My manager asked if it could run itself. Here's how I automated iam-audit with Fargate, EventBridge and Terraform (Part 3)

Gerardo Castro Arica for AWS Heroes

Mar 24

My manager asked if it could run itself. Here's how I automated iam-audit with Fargate, EventBridge and Terraform (Part 3)

#aws #security #python #boto3

7 min read

Cover image for I automated an AWS Security Maturity Model recommendation across 40 accounts — design decisions included

Gerardo Castro Arica for AWS Heroes

Mar 25

I automated an AWS Security Maturity Model recommendation across 40 accounts — design decisions included

#aws #security #cloud #python

10 min read

Cover image for Mutable tags. 10,000 pipelines. One credential. — What the Trivy attack taught me about implicit trust

Gerardo Castro Arica for AWS Heroes

Mar 27

Mutable tags. 10,000 pipelines. One credential. — What the Trivy attack taught me about implicit trust

#ai #security #devops

10 min read

Cover image for OpenClaw on AWS Lightsail: Live Demo, Real Findings and the Security Gap No Framework Models Yet — Part 4

OpenClaw Challenge Submission 🦞

Gerardo Castro Arica for AWS Heroes

Apr 16

OpenClaw on AWS Lightsail: Live Demo, Real Findings and the Security Gap No Framework Models Yet — Part 4

#ai #openclawchallenge #devchallenge #openclaw

14 min read