AWS IAM Privilege Escalation Learning Path
So you want to learn about AWS IAM privilege escalations…where should you start, and what should you learn? We launched a course specifically for this…
Category: Cloud Security
Instantly Query AWS with Steampipe Using SQL
How can I find security misconfigurations in my AWS accounts within minutes? How can I do that without spending weeks setting up data pipelines, or…
Encrypt and Decrypt Data with KMS and Data Keys [Cheat Sheet]
Whether you’re studying for the AWS Certified Security Specialty exam, or whether you need a way of encrypting and decrypting data to keep it safe,…
Managing cloud permission security at scale [Cheat Sheet]
So you’re using the cloud and things are going great, but after a few months, you start to run across these common issues: Issue 1…
Incident Response Playbook – EC2 Cryptomining [Cheat Sheet]
You wake up tomorrow to a GuardDuty notification that there might be EC2 cryptomining activity going on in one of your AWS accounts. What’s your…
Getting Started with AWS Secrets Manager [Cheat Sheet]
Studying for the AWS Certified Security Specialty exam, or deploying an application or resources on AWS that need access to long-term secrets? You need to…
Getting Started with AWS KMS [Cheat Sheet]
Alright, this one is going to take a series but listen up because it’s super important! There’s a lot to talk about when it comes…
AWS CloudTrail CLI [Cheat Sheet]
Here’s a CloudTrail CLI cheat sheet in both downloadable image format and text format for reference. AWS CloudTrail Downloadable CLI Cheat Sheet Please note this…
Simulate AWS Cloud Attacks with Real-World Techniques [Cheat Sheet]
How can you tell if your threat detection measures are working in AWS? Or that your security controls and incident response playbooks are effective? One…
Introducing CloudSec.Cybr
One day I was looking at a mess of notes I’ve created and collected from years’ worth of research, learning, and experience. I couldn’t help…