DEV Community

#cloudsecurity

Securing cloud environments like AWS, Azure, and GCP, including configurations and services.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Writing an IAM Policy That's Actually Least Privilege

Writing an IAM Policy That's Actually Least Privilege

Comments
8 min read
Kubernetes Pod Security Standards (PSS) & Native Admission Control

Kubernetes Pod Security Standards (PSS) & Native Admission Control

Comments
4 min read
Zero-Trust Microservices with WebAssembly (Wasm) Runtime Sandboxing

Zero-Trust Microservices with WebAssembly (Wasm) Runtime Sandboxing

Comments
4 min read
Cilium eBPF & Tetragon: Cloud-Native Runtime Security & Network Enforcement

Cilium eBPF & Tetragon: Cloud-Native Runtime Security & Network Enforcement

Comments
5 min read
IAM Roles Anywhere: AWS Access With Zero Static Keys

IAM Roles Anywhere: AWS Access With Zero Static Keys

Comments 1
6 min read
51 Findings in SadCloud: What a Verifier Sees That Scanners Frame Differently

51 Findings in SadCloud: What a Verifier Sees That Scanners Frame Differently

Comments
3 min read
Google Cloud spells out its abuse-response ladder: throttle, isolate, suspend

Google Cloud spells out its abuse-response ladder: throttle, isolate, suspend

2
Comments
2 min read
ThoughtWorks Just Named the Problem. Here's the Structural Fix.

ThoughtWorks Just Named the Problem. Here's the Structural Fix.

1
Comments
10 min read
Your Cloud Has Attack Paths No Scanner Can Find. Because They Don't Exist in Any Single Resource

Your Cloud Has Attack Paths No Scanner Can Find. Because They Don't Exist in Any Single Resource

1
Comments 1
8 min read
Common Mode Failure: The Blast Radius Nobody Measures

Common Mode Failure: The Blast Radius Nobody Measures

1
Comments
9 min read
Your CI Pipeline Has a Security Gap That Isn't a Vulnerability

Your CI Pipeline Has a Security Gap That Isn't a Vulnerability

1
Comments
8 min read
Every AWS Complaint is an Unwritten Invariant

Every AWS Complaint is an Unwritten Invariant

2
Comments
7 min read
Your AI SOC Agent Has a Task Role. Does It Also Have Your S3 Credentials?

Your AI SOC Agent Has a Task Role. Does It Also Have Your S3 Credentials?

1
Comments
5 min read
CSA Says Harden Your Networks for the AI Storm. Here's How to Verify You Actually Did.

CSA Says Harden Your Networks for the AI Storm. Here's How to Verify You Actually Did.

1
Comments
7 min read
The Model Didn't Escape the Sandbox. The Sandbox Was Misconfigured.

The Model Didn't Escape the Sandbox. The Sandbox Was Misconfigured.

2
Comments
8 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.