Pinned
Why You're Getting PWNED on AWS
A collection of customer security incidents
Grumpy's Cloud Foundation Infra Blog
Building IT infra for 20+ years. Cloud foundations: security, networking, governance, scalability, ops, automation.
Latest articles
Why You Need to Stop Using that Lone AWS Account
The Basics First, your AWS account: is not a "login" to AWS. is akin to your "subscription" to AWS. can be identified using a 12 digit number that is unique. has a name. has one primary email address, known as the account's email address. provides s...
Wrapping AWS Control Tower Account Factory
This post presents a small wrapper product for the AWS Control Tower Account Factory. The wrapper supports automation as it provides a stable interface (name and version) to the Control Tower Account Factory that doesn't change over time. The out of ...
The Dreaded AWS Inventory Question - Whats Running In My AWS Account?
A Hard Problem.
Serverless Event Driven AWS IAM Identity Center Permission Set Automation
The post introduces a solution for automating AWS Identity Center permissions management. The solution manages AWS accounts and permission set assignments for groups created within AWS Identity Center from an external Identity Provider (such as Azure...