Cloud Native Runtime Security. Contribute to falcosecurity/falco development by creating an account on GitHub.

Amazon S3 is an object storage service that offers industry-leading scalability, data availability, security, and performance. Many…

Collection of semi-useful Service Control Policies and scripts to manage them - jchrisfarris/aws-service-control-policies: Collection of semi-useful Service Control Policies and scripts to manage them

Need faster security validation for Cloud services? We've got you covered! Accelerate your service onboarding with our threat models and actionable security controls. Updated continuously.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc. - toniblyx/my-arsenal-of-aws-security-tools: List of open source tools for AWS security: defensive, offensive,...

With more than 100 trillion objects in Amazon Simple Storage Service (Amazon S3) and an almost unimaginably broad set of use cases, securing data stored in Amazon S3 is important for every organization. So, we’ve curated the top 10 controls for securing your data in S3. By default, all S3 buckets are private and can […]

Antivirus for Amazon S3. Contribute to widdix/aws-s3-virusscan development by creating an account on GitHub.

Some actionable advice that can be undertaken to establish a cloud security program aimed at protecting a cloud native, service provider agnostic, container-based, offering

Some actionable advice that can be undertaken to establish a cloud security program aimed at protecting a cloud native, service provider agnostic, container-based, offering.

AWS Security Consulting

AWS IAM Permissions Guardrails https://aws-samples.github.io/aws-iam-permissions-guardrails/

Some actionable advice that can be undertaken to establish a cloud security program aimed at protecting a cloud native, service provider agnostic, container-based, offering.

CloudGPT - Use ChatGPT to analyze AWS policies for vulnerabilities - gpt.py

10 Best Practices for Cloud Security Posture Management | As more and more organizations move to the cloud and as the technology becomes more complex, so do the threats. Protecting your cloud environment and maintaining a strong and efficient posture is essential. Here are 10 best practices to do just that.

Finally, a simple way to shift cloud security left. With Resourcely, you can provision cloud resources that are secure and compliant by design.

Read up on cloud incident response, including how it differs from traditional incident response, its benefits and challenges, best practices and more.

Whether you have started thinking about transitioning to the cloud, are already on your way or have been ‘there’ for a while, how involved is your security team in the transformation? As a public speaker, I only submit presentations when I have research that I am passionate about, or when I believe I can present an inspirational topic. In 2019, Suhail (arranging HackCon) specifically requested a cloud-focused session and I went right to the drawing board. I came back with my session ‘10 lessons learned from 5 years in the cloud’. Unlike my previous presentations, this session focused a lot more on the transformational challenges for security teams when it comes to adopting the cloud and, strategies for succeeding with building your security team for the cloud.

Learn how to secure AWS with usable IAM architecture, policies, and automation that scales security best practices efficiently to all developers.

Get started integrating security at critical points during your cloud adoption efforts and operations.

Curated list of awesome cloud security blogs, podcasts, standards, projects, and examples. - GitHub - Funkmyster/awesome-cloud-security: Curated list of awesome cloud security blogs, podcasts, stan...

Build secure AWS environments in minutes: automated services for building, assessing, and securing AWS environments.

An AWS tool to help you create a point in time assessment of your AWS account using Prowler and Scout as well as optional AWS developed ransomware checks. - GitHub - awslabs/aws-security-assessmen...

Learn best practices that can help you meet your security and compliance goals using AWS infrastructure and services.

Knowing only the name of a public S3 bucket, you can ascertain the account ID it resides in.

If you haven’t been using VPC endpoints until now, AWS's two new condition keys should make you consider doing so

A collection of AWS Security related workshops