Simulate AWS Cloud Attacks with Real-World Techniques [Cheat Sheet]
How can you tell if your threat detection measures are working in AWS? Or that your security controls and incident response playbooks are effective? One…
Introducing CloudSec.Cybr
One day I was looking at a mess of notes I’ve created and collected from years’ worth of research, learning, and experience. I couldn’t help…
AWS IAM Best Practices [Cheat Sheet]
Securing your AWS accounts and environments starts with implementing AWS IAM best practices. Get this right and you will have a solid security foundation. Get…
AWS Secrets Manager Enumeration – Cybr Lab Walkthrough
In this lab walkthrough, we’re going to take a look at how to enumerate the AWS Secrets Manager service in order to better understand how…
EventBridge Ignoring CloudShell GetFileDownloadUrls Events
I love working in AWS…but sometimes it makes you want to pull your hair out because it doesn’t behave the way you expect it to…
Introducing Free AWS Cloud Security Hands-On Labs
Our free Hands-On Labs are a great way to dip your toes into the AWS cloud security space completely risk-free. No credit card required, just…
Attacking and Defending Amazon EKS [Cheat Sheet]
Our live presentation on Attacking & Defending Amazon EKS sparked interesting questions and conversations regarding the biggest threats to Amazon EKS (and Kubernetes in general). A…
AWS Services and Concepts on the AWS Security Specialty Exam [Cheat Sheet]
Sometimes the hardest part is knowing where to start studying for an exam. With so much to learn and so many different topics, what should…
Amazon S3 Security Controls [Cheat Sheet]
Are you keeping your data stored in AWS safe? Amazon S3 has multiple controls you can use to protect your data. Let’s take a look:…
My AWS IAM access keys were exposed & exploited…what should I do? [Cheat Sheet]
My AWS access keys were exposed and are being exploited by a threat actor. What do I do?!?! Step 1: Don’t panic! I’ve got you.…