From the blog
IAM
Read Cybr articles tagged IAM.
Browse the archive
Latest articles
AWS IAM Credentials Report [Cheat Sheet]
I recently came across this neat cheat sheet by Steampipe for AWS IAM Credential Reports, which is a simple but mighty feature you may not…
Read articleWhat Is AWS IAM? Users, Groups, Roles, and Policies Explained
AWS IAM controls who can do what in your AWS accounts. Here is how users, groups, roles, and policies fit together, with CLI examples for each.
Read articleAWS IAM Roles Explained: Trust Policies, Service Roles, and Best Practices
IAM roles give people and workloads short-term credentials instead of long-term access keys. Learn how roles, trust policies, and service-linked roles work.
Read articleAWS IAM Privilege Escalation Techniques
How attackers abuse IAM permissions like iam:CreateAccessKey and iam:AttachUserPolicy to escalate privileges in AWS, with example policies, exploits, and fixes.
Read articleHow to Achieve Least Privilege in AWS IAM
Least privilege is easy to say and hard to do. Here are practical steps to get there in AWS, and how IAM Access Analyzer helps you check your policies.
Read articleAWS IAM Identity Center: Permission Sets, Identity Sources, and Why to Use It
IAM Identity Center (formerly AWS SSO) gives your workforce single sign-on access to many AWS accounts without IAM users or long-term credentials.
Read articleAWS IAM Enumeration CLI Commands
A reference of AWS CLI commands for enumerating IAM users, groups, roles, and policies, with the permission each command needs.
Read articleMy AWS IAM access keys were exposed & exploited…what should I do? [Cheat Sheet]
My AWS access keys were exposed and are being exploited by a threat actor. What do I do? Step 1: Don’t panic. Here is the incident response playbook.
Read article