DEV Community

#iam

Identity and Access Management principles, technologies, and best practices.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Why "Request a Demo" Is the Wrong First Step for IAM Security Tools

Why "Request a Demo" Is the Wrong First Step for IAM Security Tools

Comments
3 min read
AWS IAM Privilege Escalation: Real Attack Paths DevOps Engineers Need to Know

AWS IAM Privilege Escalation: Real Attack Paths DevOps Engineers Need to Know

Comments
5 min read
Deploying ZITADEL – Open-Source Identity and Access Management Platform

Deploying ZITADEL – Open-Source Identity and Access Management Platform

7
Comments
5 min read
AWS STS ExternalId and the Confused Deputy Problem: A Practical Guide

AWS STS ExternalId and the Confused Deputy Problem: A Practical Guide

Comments
2 min read
The 7 IAM Misconfigurations We See in Almost Every AWS Account

The 7 IAM Misconfigurations We See in Almost Every AWS Account

Comments
2 min read
I stopped putting AWS keys in GitHub Secrets. Here's what I do instead.

I stopped putting AWS keys in GitHub Secrets. Here's what I do instead.

Comments
5 min read
AWS IAM NotAction vs Deny: The Misread Statement That Grants Everything

AWS IAM NotAction vs Deny: The Misread Statement That Grants Everything

Comments
2 min read
Day 19: Apache Deploys, and a Policy Is Just a Document Until It's Attached

Day 19: Apache Deploys, and a Policy Is Just a Document Until It's Attached

5
Comments 2
3 min read
The Most Dangerous Word in Cloud Security Is Temporary

The Most Dangerous Word in Cloud Security Is Temporary

1
Comments
1 min read
IAM Access Analyzer Lied to Us: The $1,000/Month Overprovisioning Mistake

IAM Access Analyzer Lied to Us: The $1,000/Month Overprovisioning Mistake

2
Comments
4 min read
Break Glass Accounts in Azure: Why You Need Them, How to Set Them Up, and What to Do When One Is Used

Break Glass Accounts in Azure: Why You Need Them, How to Set Them Up, and What to Do When One Is Used

Comments 1
12 min read
Day 16: A Load Balancer in Ten Lines of Nginx, and Least-Privilege IAM

Day 16: A Load Balancer in Ten Lines of Nginx, and Least-Privilege IAM

6
Comments
3 min read
iam:PassRole Explained: The Most Abused IAM Permission

iam:PassRole Explained: The Most Abused IAM Permission

1
Comments
2 min read
GitGuardian NHI Governance Now Gives More Comprehensive Visibility

GitGuardian NHI Governance Now Gives More Comprehensive Visibility

Comments
6 min read
Gartner IAM Summit 2026: Identity Expanded Faster Than Most Programs Did

Gartner IAM Summit 2026: Identity Expanded Faster Than Most Programs Did

Comments
9 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.