From the Cybr blog
Cloud Security
Read practical guides, tutorials, and security research about Cloud Security from the Cybr blog.
Browse the archive
More Cloud Security articles
Identifying critical AWS security issues with Prowler and Security Hub (Part 1)
Learn how to integrate Prowler, a cloud security assessment tool, with AWS Security Hub for automated security findings using a serverless architecture. The walkthrough shows how to set up a solution that leverages AWS CodeBuild to run Prowler scans, store results in S3 buckets, and push findings directly to Security Hub for centralized security monitoring.
Read article
AWS IAM Credentials Report [Cheat Sheet]
I recently came across this neat cheat sheet by Steampipe for AWS IAM Credential Reports, which is a simple but mighty feature you may not…
Read article
Red Teaming AWS Lambda CTF Hands-On Labs
AWS Lambda offensive security labs launched in November 2024
Read article
Centralized root management for AWS multi-account
When you are running multiple accounts through AWS Organizations, there are times when you may need to perform root-level actions in your member accounts. It…
Read article
AWS Resource Control Policies (RCPs) Explained: Demo with Secrets Manager
AWS has added another layer of defense – Resource Control Policies, or RCPs for short. Learn what they are, how they work, and how they compare to SCPs with a hands-on demo.
Read article
AWS Detection Engineering with Grimoire
In a prior article, I showed you how to get started with a tool called Stratus Red Team to simulate adversaries by executing attacks against…
Read article
10 Best Practices for AWS Secrets Manager [Cheat Sheet]
In a prior post, we learned about AWS Secrets Manager: what it is, why it’s used, and how to get started with it. In this…
Read article
Hands-On Labs Added September & October 2024: IaC, S3, DevSecOps
Let’s take a look at all of the Hands-On Labs we launched in September & October 2024. They include labs in 3 primary categories: Foundational…
Read article
There’s a new attack targeting AWS accounts and it involves AI
Commonly when a threat actor gains access to AWS credentials (often long-term access keys), they will do a few things depending on their objectives…like for…
Read article
AWS SCS-02 Practice Exam Questions With Detailed Explanations
Studying for the AWS Certified Security Specialty (SCS-02) certification exam? Practice and challenge your readiness with our free practice exam questions. We’ll be adding a…
Read article