Cloud Security · 10 min
Cloud IAM blast radius: map trust before the incident
The resource policy you did not draw is the one the attacker walks. Graph who can assume whom, then cut the edges that surprise you.
Read →Topic
Cloud security architecture with an identity-first lens: IAM graphs, trust boundaries, logging that is useful in an incident, and the shared-responsibility details vendors leave out.
Cloud Security · 10 min
The resource policy you did not draw is the one the attacker walks. Graph who can assume whom, then cut the edges that surprise you.
Read →