Cloud

The Google Cloud Developer's Cheat Sheet. Contribute to priyankavergadia/google-cloud-4-words development by creating an account on GitHub.

Get started integrating security at critical points during your cloud adoption efforts and operations.

In this blog post I will outline our reasons for moving from NAT Gateways toward NAT instances, instead of the opposite direction.

We’re announcing the release of a second version of our threat matrix for storage services, a structured tool that assists in identifying and analyzing potential security threats on data stored in cloud storage services.

Generates runbooks for GuardDuty findings. Contribute to aquia-inc/aws-guardduty-runbook-generator development by creating an account on GitHub.

Background

A hands-on style weekly newsletter for cloud security professional, including executives, focused on latest cloud security (especially AWS) news/releases/trends. Click to read AWS Cloud Security Weekly, by AWS-CloudSec Weekly Newsletter, a Substack publication. Launched a month ago.

Discover Effective AWS Security Monitoring Strategies. Combining the right AWS services is key when setting up AWS Security Monitoring.

Check out my Lucidchart document! Lucidchart is the intelligent diagramming solution that empowers teams to clarify complexity, align their insights, and build the future faster. Create your own diagram or flowchart at lucidchart.com.

Google Cloud CISO Phil Venables talks with Royal Hansen, vice president of Privacy, Safety, and Security Engineering at Google, about red teaming AI and the Aspen Security Forum.

Incident Response in AWS made easy (easier 😉)

An open-source service control policies management tool

Service Control Policies (SCPs) can be a great way to prevent actions from happening in AWS accounts. In this post, we will illustrate a specific use case of SCPs that protects the security baseline, or landing zone, configuration you’ve created for accounts

Datadog Cloud Security Atlas is a risk register for Threats and Vulnerabilities. This database gives you the ability to search and filter on your cloud provider platform, risk type, and sort by impact, exploitability, and recency.,Test out the search below by searching for specific cloud services like EBS or S3. From there you can chart your own course to understanding risk that relates to your environment.

Put yourself to the test with our unique CTF challenge and boost your AWS IAM knowledge. Do you have what it takes to win The Big IAM Challenge?

Cloud vulnerabilities database - an open project to list all known cloud vulnerabilities and Cloud Service Provider security issues

Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs. - GitHub - iknowjason/Awesome-CloudSec-Labs: Awesome free clou...

Example AWS Service control policies to get started or mature your usage of AWS SCPs. - service-control-policy-examples/Deny-changes-to-security-services at main · aws-samples/service-control-polic...

Stuff for social media

AWS Security Maturity Model

Example AWS Service control policies to get started or mature your usage of AWS SCPs. - GitHub - aws-samples/service-control-policy-examples: Example AWS Service control policies to get started or ...

Artificial Intelligence Infrastructure-as-Code Generator. - gofireflyio/aiac: Artificial Intelligence Infrastructure-as-Code Generator.

CloudZero is the only cloud cost intelligence platform that puts engineering in control by connecting technical decisions to business results.

Learn to build production-ready serverless applications on AWS

What are the threats in letting an AWS service manage the encryption of your data instead of creating a Customer Managed Key?

Cloud Native Runtime Security. Contribute to falcosecurity/falco development by creating an account on GitHub.

Amazon S3 is an object storage service that offers industry-leading scalability, data availability, security, and performance. Many…

Read this technical review of IMDS, an important AWS EC2 service component, to understand the 2 versions and better secure your AWS environment