SSH Authentication with AuthorizedKeysCommand
Imagine a world where adding or removing a user’s SSH access was as simple as a single button in AWS. [...]
AWS
GKE Workload Identity
Traditionally, there have been security challenges with the methods used for Kubernetes workloads running on GKE authenticating to Google Cloud [...]
VPC Service Controls in Plain English
Google Cloud Platform (GCP) offers powerful security controls to mitigate API-based data exfiltration called VPC Service Controls. To execute a [...]
Exploit SSRF to gain AWS Credentials
In the cloud, it’s common to implement decoupled components that integrate and process client data transparently. Without adequate security controls [...]
MCP Server Security: Navigating the New AI Attack Surface
Just as the rise of cloud computing forced a rethink of perimeter-based security, the adoption of large language models (LLMs) [...]
GitHub Actions on AWS: How to Implement Identity Federation
Configuring OIDC for GitHub Actions on AWS GitHub Actions offers a feature that allows workflows to generate signed OpenID Connect [...]
Assured Workloads in Google Cloud Platform
What is Google Cloud Platform’s Assured Workloads? Google Cloud Platform’s (GCP) Assured Workloads provides a way for control packages to [...]
Understanding AWS Service Control Policies
Access management within your cloud environment can be one of the most demanding challenges within AWS, with the constant addition [...]
