Security vulnerabilities can crop up anywhere in the cloud, even in connections to trusted resources and personnel. However, assigned roles, users and groups help control who has access to what. With ...

AWS Identity and Access Management (IAM) is perhaps the AWS service with the greatest potential to introduce security misconfigurations. After all, an IAM role with excessive permissions can result in ...

Approval-gated self-service password reset for classic AWS IAM users, built with Terraform, Lambda, and Slack. AWS IAM has no forgot-password flow. If an IAM user forgets their console password, an ...

Identity and access management (IAM) is the process of identifying and controlling the access granted to users, devices and services. It is one of the oldest concepts in security, tracing back to the ...

Brien walks through the process of creating an IAM role for the AWS Fault Injection Simulator in order to find out what happens when an EC2 spot instance is interrupted. I recently wrote a blog post ...

As enterprises continue to digitize and decentralize their operations, the identity layer has become the most targeted and vulnerable point in their infrastructure. Identity and access management (IAM ...