From the blog
Blog
Read practical cloud security, application security, and cybersecurity guides, tutorials, and research from Cybr.
Browse the archive
More Blog articles
AWS IAM Best Practices [Cheat Sheet]
Securing your AWS accounts and environments starts with implementing AWS IAM best practices. Get this right and you will have a solid security foundation. Get…
Read article
AWS Secrets Manager Enumeration – Cybr Lab Walkthrough
In this lab walkthrough, we’re going to take a look at how to enumerate the AWS Secrets Manager service in order to better understand how…
Read article
EventBridge Ignoring CloudShell GetFileDownloadUrls Events
I love working in AWS…but sometimes it makes you want to pull your hair out because it doesn’t behave the way you expect it to…
Read articleWhat Is AWS IAM? Users, Groups, Roles, and Policies Explained
AWS IAM controls who can do what in your AWS accounts. Here is how users, groups, roles, and policies fit together, with CLI examples for each.
Read articleOpen-Source AWS Security Tools, Grouped by What They Help You Do
A curated list of open-source AWS security tools for IAM, incident response, monitoring, security assessments, pentesting, threat detection, and attack simulation.
Read articleAWS Threat Detection: Services and Events to Watch
The AWS-native services for threat detection, and the IAM and configuration changes that can signal a threat actor is in your account.
Read articleAWS Security Monitoring, Logging, and Alerting
How CloudTrail, CloudWatch, EventBridge, and Athena work together for security monitoring in AWS, plus the AWS logging, aggregation, and visualization services.
Read articleAWS IAM Roles Explained: Trust Policies, Service Roles, and Best Practices
IAM roles give people and workloads short-term credentials instead of long-term access keys. Learn how roles, trust policies, and service-linked roles work.
Read articleAWS IAM Privilege Escalation Techniques
How attackers abuse IAM permissions like iam:CreateAccessKey and iam:AttachUserPolicy to escalate privileges in AWS, with example policies, exploits, and fixes.
Read articleHow to Achieve Least Privilege in AWS IAM
Least privilege is easy to say and hard to do. Here are practical steps to get there in AWS, and how IAM Access Analyzer helps you check your policies.
Read article