Best Practices 9 Things To Do Before Someone Steals Your AWS Credentials Amazon Web Services already has a defense for most of the things a Security Operations Center cares about. But what about stolen credentials? Do these 9 things beforehand to limit the pain.
Best Practices Five ways to prepare for management questions about cloud security Imagine you’ve been called into a quarterly Board meeting. They want to know how things are going with the cloud. They are really asking some good questions. You had mentally prepared some answers to keep the spotlight off you, but it’s clear they are going to dig in.
Best Practices How to hit the ever-moving target of Least Privilege access How many users and roles have way too much access, out of convenience? When is the last time you checked to make sure access levels were consistent with the business need? And when is the last time you reduced someone’s access?
Best Practices Why you need a dedicated AWS security account “Please provide proof that these logs haven’t been tampered with.” It’s the nightmare scenario for any IT department. You’ve been notified by an auditor – or a legal team, a government body, or even a customer — that your cloud security program is being reviewed. You’ve been told
Best Practices How to fix alarm overload with cloud security automation So you’ve got your new security monitoring system set up. You have alarms that send you emails when the root user logs in. You get a slack message when someone launches an RDS instance open to the internet. And everyone gets a text message when an S3 bucket is
Best Practices Best Practices For Using and Protecting AWS Access Keys Is your development team taking shortcuts with AWS access keys? Is your team passing around keys on Slack or email? If you don’t know the answer off the top of your head, it’s worth asking around. This post is for you. Access keys (also referred to as an
Best Practices The high-performing team's guide to AWS Identity and Access Management Getting deep into IAM is a great way to have analysis paralysis. Here are some common sense, high-leverage tips to get secure but keep rolling. Intimidated or annoyed by the complexity of IAM? Worried that if you dive into IAM, you’ll never get out because the details go on
Automation 5 Habits That Will Lead to Security Breaches In today’s competitive business world, there is pressure to innovate like no other time in history. With the rise of the cloud and its ability to support rapid, iterative experimentation, you are going faster than ever before. With that speed, you are always trying to get new features and
