DEV Community

#cloudsecurity

Securing cloud environments like AWS, Azure, and GCP, including configurations and services.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Sandbox Had One Allowed Egress Path. The Model Used it to Escape.

The Sandbox Had One Allowed Egress Path. The Model Used it to Escape.

2
Comments
7 min read
Cloud Security Misconfigurations: Common Problems and How to Prevent Them

Cloud Security Misconfigurations: Common Problems and How to Prevent Them

Comments
6 min read
Try GreenOps Scan Safely: Create a Read-Only AWS Profile First

Try GreenOps Scan Safely: Create a Read-Only AWS Profile First

Comments
4 min read
I Stopped Sharing Servers With Strangers

I Stopped Sharing Servers With Strangers

6
Comments
3 min read
Writing an IAM Policy That's Actually Least Privilege

Writing an IAM Policy That's Actually Least Privilege

Comments
8 min read
Zero-Trust Microservices with WebAssembly (Wasm) Runtime Sandboxing

Zero-Trust Microservices with WebAssembly (Wasm) Runtime Sandboxing

Comments
4 min read
Kubernetes Pod Security Standards (PSS) & Native Admission Control

Kubernetes Pod Security Standards (PSS) & Native Admission Control

Comments
4 min read
Cilium eBPF & Tetragon: Cloud-Native Runtime Security & Network Enforcement

Cilium eBPF & Tetragon: Cloud-Native Runtime Security & Network Enforcement

Comments
5 min read
IAM Roles Anywhere: AWS Access With Zero Static Keys

IAM Roles Anywhere: AWS Access With Zero Static Keys

Comments 1
6 min read
51 Findings in SadCloud: What a Verifier Sees That Scanners Frame Differently

51 Findings in SadCloud: What a Verifier Sees That Scanners Frame Differently

Comments
3 min read
Iran Doesn't Need to Mine Hormuz — Your requirements.txt Is Already Rigged

Iran Doesn't Need to Mine Hormuz — Your requirements.txt Is Already Rigged

26
Comments 2
5 min read
Google Cloud spells out its abuse-response ladder: throttle, isolate, suspend

Google Cloud spells out its abuse-response ladder: throttle, isolate, suspend

2
Comments
2 min read
ThoughtWorks Just Named the Problem. Here's the Structural Fix.

ThoughtWorks Just Named the Problem. Here's the Structural Fix.

1
Comments
10 min read
Your Cloud Has Attack Paths No Scanner Can Find. Because They Don't Exist in Any Single Resource

Your Cloud Has Attack Paths No Scanner Can Find. Because They Don't Exist in Any Single Resource

1
Comments 1
8 min read
Common Mode Failure: The Blast Radius Nobody Measures

Common Mode Failure: The Blast Radius Nobody Measures

1
Comments
9 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.