Introduction When it comes to cloud security, managing who has access to what is absolutely crucial. Organizations are constantly looking for secure ways to manage elevated permissions without compromising security. Google Cloud Platform's (GCP) new PAM product, Privileged Access Manager, solves the issue of handling temporary access to...
Introduction Welcome to the exciting world of cloud security! My journey with AWS security began in 2019 when I earned my first certification, the AWS Certified Solutions Architect Associate and later also the AWS Security Specialty. Since then, my fascination with the cloud has only grown, and I've...
Introduction Imagine you're sitting in a room full of cloud architects and penetration testers, discussing the latest advancements in cloud security. The topic of the day is AWS's transition from Instance Metadata Service version 1 (IMDSv1) to version 2 (IMDSv2). A lot of people in the...
Introduced by Gartner in 2021, Cloud-Native Application Protection Platform promises a single pane of glass for all your cloud security needs. 🛡️ Imagine having all your security tools working together seamlessly, like the Avengers assembling to fight a threat! 💥 But what exactly is CNAPP, and how does it work? Let'...
Introduction Today, we'll be exploring a powerful feature that allows you to export GCP Security Command Center findings to Pub/Sub, and then effortlessly transform them via Cloud Functions for seamless integration with other systems. Understanding GCP Security Command Center 🧠 Before we jump into the nitty-gritty details, let&...
Operating systems are becoming increasingly intricate, demanding meticulous configuration to ensure robust security. Nowhere is this more evident than with EC2 instances, where the operating system is dynamic and subject to change. The challenge lies in securing these instances. Enter the Center for Internet Security (CIS) Benchmarks - a guidance...
