Cheat sheets
Our catalog of cloud security cheat sheets
Showing 13–21 of 21 cheat sheets
-
- Logging & monitoring
CloudTrail Events and Data Recording
Management Events, Data Events, Insights Events, Event History, Trails, and CloudWatch Log Analytics.
- Management Events
- Data Events
- Insights Events
- Event History
- Trails
- CloudWatch Log Analytics
-
- Infrastructure as code
Infrastructure as Code on AWS with Terraform
Deploy infrastructure securely and repeatably on the AWS cloud.
- Terraform CLI
- State
- Providers
- Variables
- Modules
-
- Security testing & tools
Simulate Cloud Attacks
Use Atomic Red Team and Stratus Red Team to emulate real-world attack techniques and validate cloud defenses.
- Atomic Red Team
- Stratus Red Team
- Adversary emulation
- Detection validation
-
- Storage security
Amazon S3 Ransomware Defenses
Learn how to effectively defend against Amazon S3 Ransomware with our cheat sheet.
- Prevention
- Detection
- Recovery
- Security testing
-
- Storage security
- Identity & access
Amazon S3 Security Controls
Current controls for protecting, restricting, encrypting, and monitoring data stored in Amazon S3.
- Access control
- Object protection
- Encryption
- Logging and monitoring
-
- Security testing & tools
Secure Your Cloud with Prowler
Multi-Cloud Open-Source CSPM
- Security best practices assessments
- Audits
- Incident Response
- Continuous Monitoring
-
- Storage security
- Identity & access
S3 Access Control
Compare S3 bucket policies, S3 ACLs, and IAM policies, including their scope, syntax, permissions, and integration with IAM.
- S3 bucket policies
- S3 ACLs
- IAM policies
- Access control
-
- Storage security
- Identity & access
Create a least privilege S3 bucket policy
Learning how to keep your Amazon S3 buckets safe and finding weak spots in bucket policies is an important part of managing AWS resources.
- S3 bucket policies
- Least privilege
- IAM
- Resource policies
-
- Incident response
- Identity & access
Incident Response Playbook — IAM credential exposure
What do you do if you find out your AWS IAM access keys have been exposed and exploited by a threat actor? Here's your cheat sheet playbook
- Analysis
- Containment
- Eradication
- Recovery
- Post-Incident Activity
