“Would you leave your Strongbox open just because you locked the house door?” — “No, right?”. IMDS is like a strongbox containing precious information about your cloud. It is important that you understand IMDS, and how to secure it. It is time you take Instance metadata service (IMDS) seriously. What is EC2 Instance Metadata Service (IMDS)? The…

The cloud is becoming increasingly popular in our day and age. It is the driving force of the modern world, and engineers are starting to shift their careers accordingly. Whatever your profession, chances are that you will have to work with the cloud in some way or another. Terms such…

“Knowing is the half the battle won”, a wise soul once said. History is testimony to it. It worked brilliantly in favour of those, who knew exact state of troops, rations and weapons. Not just that, any weaknesses that adversaries may pick on. If you knew nothing about your army…

The cloud has become an integral part of modern-day tech infrastructure, and with that comes the need for tight security measures. The CIS AWS Benchmark is one of the most comprehensive security compliance standards for AWS cloud environments. It provides guidelines for configuring AWS services securely and is widely recognized…

AWS S3 buckets are among the most commonly used AWS resource. At the same time, S3 buckets are most prone to misconfigurations. All major famous leaks generally have happened with S3 bucket misconfigurations. For this reason, the cloud teams continuously keep track of S3 bucket configurations. The AWS resource inventory…

Are you tired of the hassle it takes to keep track of all your IAM users? Up until now, the only way to get a sense of your users was to hop from one account’s console to another, export lists, and then tediously combine them. Or, for the more technically…

Writing management tools have always been fun and a challenge. Fun because it’s challenging. You always learn a thing or two. For example, we learned yet one more weird fact about AWS API inconsistency, maybe you already know- The S3 Bucket location API always returns null for all the buckets…

In today’s cloud-centric world, managing identities and access plays a vital role in maintaining the security and efficiency of AWS environments. AWS Identity and Access Management (IAM) is the cornerstone for controlling access to AWS resources. However, as organizations scale and adopt multi-account environments, managing a large number of IAM…

Securing data is the biggest challenge when using Public Cloud such as AWS. The data in the public cloud is a frequent target for hackers. The user handles the security of its cloud assets under the shared responsibility model. Cloud asset security requires careful cloud resources configuration. The need for encryption For many applications…