Z3 detecta vulnerabilidades cloud pero no explica por qué
¿Tu cloud es vulnerable? Z3 seguridad cloud lo prueba en milisegundos, pero solo dice 'sat'. Descubrí qué capa falta y qué herramientas sí te explican e...
Z3 detecta vulnerabilidades cloud pero no explica por qué
¿Tu cloud es vulnerable? Z3 seguridad cloud lo prueba en milisegundos, pero solo dice 'sat'. Descubrí qué capa falta y qué herramientas sí te explican e...

Step-by-step guide to setting up Okta SSO for AWS via IAM Identity Center using SAML and SCIM: groups synchronization, creating AWS Organizations and Permission Sets
IAM Role Trust Policies: Misconfigurations Hiding in Plain Sight
https://www.token.security/blog/iam-role-trust-policies-misconfigurations-hiding-in-plain-sight
As your Amazon Web Services (AWS) environment grows, you might develop a need to grant cross-account access to resources. This could be for various reasons, such as enabling centralized operations across multiple AWS accounts, sharing resources across teams or projects within your organization, or integrating with third-party services. However, granting cross-account access requires careful consideration […]
Quite often for a new project that is just building its infrastructure and CI/CD to do so as an MVP/PoC, and at the beginning, no time is spent on tuning AWS IAM Roles and IAM Policies, but simply connecting AdministratorAccess.
Actually, this is exactly what happened in my project, but we are growing, and it’s time to put things in order in […]
https://rtfm.co.ua/en/aws-iam-access-analyzer-policy-generation-create-an-iam-policy/
So, we have an AWS Elastic Kubernetes Service cluster with Authentication mode EKS API and ConfigMap, which we enabled during upgrade of the EKS Terraform module from version 19.21 to 20.0.
Before switching EKS Authentication mode completely to the API, we need to transfer all users and roles to Access Entries of the EKS cluster from aws-auth […]
https://rtfm.co.ua/en/terraform-managing-eks-access-entries-and-eks-pod-identities/
An example of creating a Terraform project to manage access to AWS EKS with Authentication Mode API and EKS Pod Identities for Kubernetes ServiceAccounts
Доволі частий кейс, коли на новому проекті, який тільки створює свою інфраструктуру і CI/CD, робиться це як MVP/PoC, і на початку на тюнінг AWS IAM Roles та IAM Policies час не витрачається, а просто підключається […]
https://rtfm.co.ua/aws-iam-access-analyzer-policy-generation-stvorennya-iam-policy/