🔴 Streamlined Security: Introducing Network Security Integration

Network Security Integration can help you integrate third-party network appliance or service deployments with your Google Cloud workloads.

https://cloud.google.com/blog/products/networking/introducing-network-security-integration/

#gcp

🔴 Google Cloud - Managing Google's Unverified Authentication Library

In Google Cloud, Application Default Credentials (ADC) allows your code/applications to automatically find and use credentials.

https://akingscote.co.uk/posts/gcloud-unconfigured-third-party-apps/

#gcp

🔶 Interactive AWS NAT Gateway

An interactive blog post exploring how AWS NAT Gateway works.

https://malithr.com/aws/natgateway/

#aws

🔴 Introducing protection summary, a new Google Cloud Backup and DR feature

Google Cloud Backup and DR's protection summary offers a centralized view of data protection configuration, identifying gaps and improving resilience.

https://cloud.google.com/blog/products/storage-data-transfer/google-cloud-backup-and-dr-protection-summary/

#gcp

🔶 Effectively implementing resource control policies in a multi-account environment

Post demonstrating how RCPs can help improve your security posture while allowing even more freedom to developers in managing their resources, thus reducing friction between central security and application teams.

https://aws.amazon.com/ru/blogs/security/effectively-implementing-resource-controls-policies-in-a-multi-account-environment/

(Use VPN to open from Russia)

#aws

🔶 How does Sendbird secure AWS?

How Sendbird matured its AWS security posture, empowering developers to deploy in a way that's both user-friendly and secure.

https://sendbird.com/blog/aws-security

#aws

🔴 ImageRunner: A Privilege Escalation Vulnerability Impacting GCP Cloud Run

The vulnerability could have allowed to abuse Google Cloud Run permissions in order to pull private Google Artifact Registry and Google Container Registry images in the same account.

https://www.tenable.com/blog/imagerunner-a-privilege-escalation-vulnerability-impacting-gcp-cloud-run

(Use VPN to open from Russia)

#gcp

🔶 Invoking Misconfigured API Gateways from Any External AWS Accounts

Did you know a misconfigured private API Gateway can be invoked from any AWS account?

https://www.offensai.com/blog/invoking-misconfigured-api-gateways-from-external-aws-accounts

(Use VPN to open from Russia)

#aws

🔶 Planning for your IAM Roles Anywhere deployment

Before you start using IAM Roles Anywhere, it's important to plan how you'll integrate it with your PKI and with your applications running outside of AWS.

https://aws.amazon.com/ru/blogs/security/planning-for-your-iam-roles-anywhere-deployment/

(Use VPN to open from Russia)

#aws

🔶 Handling Network Throttling with AWS EC2 at Pinterest

Post discussing Pinterest's experiences in identifying the challenges associated with EC2 network throttling, as well as how they developed network performance monitoring for their EC2 fleet.

https://medium.com/@Pinterest_Engineering/handling-network-throttling-with-aws-ec2-at-pinterest-fda0efc21083

(Use VPN to open from Russia)

#aws

🔴 Introducing Google Unified Security

Google introduced Unified Security, a new security solution that combines Google Cloud's security products with Mandiant's expertise to provide a comprehensive approach to threat intelligence, security operations, cloud security, and secure enterprise browsing.

https://cloud.google.com/blog/products/identity-security/driving-secure-innovation-with-ai-google-unified-security-next25/

#gcp

🔴 Cloud WAN: Connect your global enterprise with a network built for the AI era

Cloud WAN is a fully managed, reliable, and secure enterprise backbone to transform enterprise wide area network (WAN) architectures.

https://cloud.google.com/blog/products/networking/connect-globally-with-cloud-wan-for-the-ai-era/

#gcp

🔶 Automating AWS Private CA audit reports and certificate expiration alerts

Guide through a custom automation workflow that harnesses AWS Private CA audit reports to monitor certificate expirations proactively.

https://aws.amazon.com/ru/blogs/security/automating-aws-private-ca-audit-reports-and-certificate-expiration-alerts/

(Use VPN to open from Russia)

#aws

🔶 How to use the new CloudTrail network activity events for AWS VPC Endpoints

How AWS VPC Endpoint CloudTrail logs can help you troubleshoot endpoint policies and strengthen your network's security against data exfiltration.

https://www.wiz.io/blog/aws-vpc-endpoint-cloudtrail

#aws

🔶 IAM Role Trust Policies: Misconfigurations Hiding in Plain Sight

Even small misconfigurations in role trust policies can unintentionally create critical privilege escalation risks in AWS, such as allowing low-privileged users to assume admin roles.

https://www.token.security/blog/iam-role-trust-policies-misconfigurations-hiding-in-plain-sight

#aws

🔶 AWS SNS Abuse: Data Exfiltration and Phishing

Post diving into publicly known SNS abuse attempts and Elastic's knowledge of the data source to develop detection capabilities.

https://www.elastic.co/security-labs/aws-sns-abuse

#aws

🔶 Path Traversal Vulnerability in AWS SSM Agent's Plugin ID Validation

A Path Traversal vulnerability found in the AWS Systems Manager (SSM) Agent, specifically within the ValidatePluginId function of the pluginutil.go file.

https://cymulate.com/blog/aws-ssm-agent-plugin-id-path-traversal/

#aws

🔶 Gaining Long-Term AWS Access with CodeBuild and GitHub

Another example of how attackers can abuse legitimate AWS services for persistence.

https://medium.com/@adan.alvarez/gaining-long-term-aws-access-with-codebuild-and-github-873324638784

#aws

🔶 Secure Cross-Account Access is Tricky. Four Common Dangerous Misconceptions

Post diving into cross-account trust policies, explaining four major misconceptions repeatedly seen in organizations, which often lead to the creation of cross-account trust paths from less secure accounts to more sensitive accounts.

https://www.token.security/blog/secure-cross-account-access-is-tricky-four-common-dangerous-misconceptions

#aws