From the blog
Cloud Security
Read practical guides, tutorials, and security research about Cloud Security from the Cybr blog.
Browse the archive
More Cloud Security articles
AWS Threat Detection: Services and Events to Watch
The AWS-native services for threat detection, and the IAM and configuration changes that can signal a threat actor is in your account.
Read articleAWS Security Monitoring, Logging, and Alerting
How CloudTrail, CloudWatch, EventBridge, and Athena work together for security monitoring in AWS, plus the AWS logging, aggregation, and visualization services.
Read articleAWS IAM Roles Explained: Trust Policies, Service Roles, and Best Practices
IAM roles give people and workloads short-term credentials instead of long-term access keys. Learn how roles, trust policies, and service-linked roles work.
Read articleAWS IAM Privilege Escalation Techniques
How attackers abuse IAM permissions like iam:CreateAccessKey and iam:AttachUserPolicy to escalate privileges in AWS, with example policies, exploits, and fixes.
Read articleHow to Achieve Least Privilege in AWS IAM
Least privilege is easy to say and hard to do. Here are practical steps to get there in AWS, and how IAM Access Analyzer helps you check your policies.
Read articleAWS IAM Identity Center: Permission Sets, Identity Sources, and Why to Use It
IAM Identity Center (formerly AWS SSO) gives your workforce single sign-on access to many AWS accounts without IAM users or long-term credentials.
Read articleAWS IAM Enumeration CLI Commands
A reference of AWS CLI commands for enumerating IAM users, groups, roles, and policies, with the permission each command needs.
Read article
Introducing Free AWS Cloud Security Hands-On Labs
Our free Hands-On Labs are a great way to dip your toes into the AWS cloud security space completely risk-free. No credit card required, just…
Read article
Attacking and Defending Amazon EKS [Cheat Sheet]
Our live presentation on Attacking & Defending Amazon EKS sparked interesting questions and conversations regarding the biggest threats to Amazon EKS (and Kubernetes in general). A…
Read article
AWS Services and Concepts on the AWS Security Specialty Exam [Cheat Sheet]
Sometimes the hardest part is knowing where to start studying for an exam. With so much to learn and so many different topics, what should…
Read article