Governance
- AWS Config Cost: Understanding the billing model and investigating hidden cost drivers
A comprehensive guide to AWS Config pricing, recording options, Athena-based analysis, and a real-world investigation into how SecurityHub control rollouts and Lambda runtime upgrades silently increase your bill.
- 7 ways to access your organizational backbone (powered by AWS)
Engaging in a cloud engineer's mindset encourages many responsibilities. The cloud is a great place for developers and has been proven to...
- CIEM Part 2: Measure risk probability in IAM
This is the second part of my CIEM series. In the first part, we covered the least-privilege principle and found out that one important...
- CIEM Part 1: How least privilege leads to a false sense of security
This is the start of a series about Cloud Identity Entitlement Management (CIEM). I will try to explain in depth what challenges you will...
- Cloud Trail and Athena: Yet another solution design
Using Athena to query cloud trail logs is a common solution designed for mid to big-sized AWS environments. Typically an IT Platform team...
- Secure IT Infrastructure with ABAC and SCP
Whoever starts to use a multi-account environment on AWS will face a lot of challenges in terms of governance and compliance. As a...
- AWS Identity Center: How to retrieve your current account assignments
Find out how to retrieve Account Assignments in AWS Identity Center.