AWS_CLI_AUTO_PROMPT=on-partial Having the AWS CLI prompt you for commands https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-parameters-prompting.html https://www.linkedin.com/posts/andrew-wc-brown_aws-aws-cloud-ugcPost-6999086641390751744-6Bba?utm_source=share&utm_medium=member_desktop
Category: AWS
Ephemeral AWS Accounts;
Ephemeral AWS Accounts;
Infrastructure as Code Cloud Automation Scripts (Teraform, CloudFormation)
Infrastructure as Code, Cloud Automation Scripts (Teraform, Ansible, CloudFormation) Terraform, CloudFormation is for service provision Ansible is for DevOps automation and configuration management. https://blog.gruntwork.io/why-we-use-terraform-and-not-chef-puppet-ansible-saltstack-or-cloudformation-7989dad2865c https://github.com/acantril/learn-cantrill-io-labs https://www.terraformupandrunning.com/?ref=gruntwork-blog-comprehensive-terraform Security https://github.com/aws-samples/siem-on-amazon-elasticsearch https://aws.amazon.com/blogs/security/how-get-started-security-response-automation-aws/ AWS CDK https://docs.aws.amazon.com/cdk/latest/guide/serverless_example.html AWS QuickStarts https://aws.amazon.com/quickstart/?quickstart-all.sort-by=item.additionalFields.sortDate&quickstart-all.sort-order=desc https://aws.amazon.com/blogs/awsmarketplace/cloudformation-templates-101-for-sellers-in-aws-marketplace/ https://github.com/aws-quickstart/quickstart-examples/ https://aws.amazon.com/blogs/infrastructure-and-automation/ https://aws.amazon.com/blogs/awsmarketplace/enable-security-and-automated-continuous-compliance-using-cloudguard-from-aws-marketplace/ https://aws.amazon.com/blogs/awsmarketplace/devops-automation-for-trend-micro-in-aws-marketplace-using-aws-service-catalog-and-aws-systems-manager-distributor/ https://github.com/acantril/learn-cantrill-io-labs Diagram to Code https://github.com/mingrammer/diagrams
Identifying entry points on O365, AWS, Azure and GCP
Identifying entry points on 0365, AWS, Azure and GCP This blog is mainly a list of Tools to expose and test entry points into AWS, Azure and GCP. My next goal is to implement these tools and develop some youtube videos. Then after that develop actual detection and mitigation strategies. Hacking the Cloud – Cloud… Continue reading Identifying entry points on O365, AWS, Azure and GCP
SCS-C01 – AWS Certified Security Specialty
SCS-C01 – AWS Certified Security Specialty Exam Questions Conflicts between AWS S3 bucket polices and IAM Polices https://aws.amazon.com/blogs/security/iam-policies-and-bucket-policies-and-acls-oh-my-controlling-access-to-s3-resources/ How do you restrict access to S3 Buckets; Restrict access to S3 Buckets using Polices and Pre-Signed URLs IAM polices, S3 bucket polices, and S3 ACLs AWS follows the least-privilege principle, so by default everything is denied.… Continue reading SCS-C01 – AWS Certified Security Specialty
AWS Notepad; Getting started on AWS, complete noob
AWS Notepad; Getting Getting started on AWS, complete noob I passed a number of AWS certs, frankly they were a waste of my time, as they didn’t cover the basics of USING the software. There is no better way to gain experience than hands on software. Here is some basic by vital bits that should… Continue reading AWS Notepad; Getting started on AWS, complete noob
AWS Logging and Monitoring Design
AWS Logging and Monitoring Design With practical and tangible Action plan – not just theoretical fluff ignored by hackers. Firstly, as much as AWS want to advertise they are secure, enabling Logging Monitoring AWS is; Not straight forward Missing allot of information from AWS, which falls under your shared responsibility. (Public Cloud Security Get out… Continue reading AWS Logging and Monitoring Design
CloudWatch
GetLogEvents support 10 requests per second per account per Region · Each request has a limit of 1MB to 10000MB(10GB) · 1MB equals around 10,000 log events, so upto 100million log events per request. · Hence, with 10 requests per second it will capture upto 1 trillion log events per second. – https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Working-with-log-groups-and-streams.html – https://docs.aws.amazon.com/cli/latest/reference/logs/get-log-events.html#examples… Continue reading CloudWatch
Amazon Web Services – security best practice rules
Amazon Web Services best practice rules Design Principles Implement a strong identity foundation Implement the principle of least privilege and enforce separation of duties with appropriate authorization for each interaction with your AWS resources. Enable traceability Monitor, alert, and audit actions and changes to your environment in real time. Integrate logs and metrics with… Continue reading Amazon Web Services – security best practice rules
Autoscale Firewall-as-a-Service
Autoscale Firewall-as-a-Service https://www.sophos.com/en-us/solutions/public-cloud/aws.aspx