From the blog
AWS
Read Cybr articles tagged AWS.
Browse the archive
More AWS articles
What Is AWS IAM? Users, Groups, Roles, and Policies Explained
AWS IAM controls who can do what in your AWS accounts. Here is how users, groups, roles, and policies fit together, with CLI examples for each.
Read articleOpen-Source AWS Security Tools, Grouped by What They Help You Do
A curated list of open-source AWS security tools for IAM, incident response, monitoring, security assessments, pentesting, threat detection, and attack simulation.
Read articleAWS Threat Detection: Services and Events to Watch
The AWS-native services for threat detection, and the IAM and configuration changes that can signal a threat actor is in your account.
Read articleAWS Security Monitoring, Logging, and Alerting
How CloudTrail, CloudWatch, EventBridge, and Athena work together for security monitoring in AWS, plus the AWS logging, aggregation, and visualization services.
Read articleAWS IAM Roles Explained: Trust Policies, Service Roles, and Best Practices
IAM roles give people and workloads short-term credentials instead of long-term access keys. Learn how roles, trust policies, and service-linked roles work.
Read articleAWS IAM Privilege Escalation Techniques
How attackers abuse IAM permissions like iam:CreateAccessKey and iam:AttachUserPolicy to escalate privileges in AWS, with example policies, exploits, and fixes.
Read articleHow to Achieve Least Privilege in AWS IAM
Least privilege is easy to say and hard to do. Here are practical steps to get there in AWS, and how IAM Access Analyzer helps you check your policies.
Read articleAWS IAM Identity Center: Permission Sets, Identity Sources, and Why to Use It
IAM Identity Center (formerly AWS SSO) gives your workforce single sign-on access to many AWS accounts without IAM users or long-term credentials.
Read articleAWS IAM Enumeration CLI Commands
A reference of AWS CLI commands for enumerating IAM users, groups, roles, and policies, with the permission each command needs.
Read article
Introducing Free AWS Cloud Security Hands-On Labs
Our free Hands-On Labs are a great way to dip your toes into the AWS cloud security space completely risk-free. No credit card required, just…
Read article