» Tag
iam
6 postsAWS EKS Privilege Escalation: Pod Metadata to Cluster-Admin
How a compromised EKS pod can escalate to cluster-admin via EC2 metadata and node tokens, plus a persistent aws-auth backdoor technique.
Building a Full IAM System in Spring Boot: Issues Faced Online
Explore the challenges faced by identityCore, an IAM system built in Spring Boot, during online deployment.
Running Claude Code on AWS Bedrock: IAM and SCP Pitfalls to Avoid
Learn about IAM and SCP configurations to avoid pitfalls when running Claude Code on AWS Bedrock.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comVerifying IAM and Lake Formation Behavior for Glue REST Catalog and S3 Tables
Aki explores the IAM and Lake Formation behavior in Glue REST Catalog and S3 Tables.
Google Denies Bounty for a Critical GCP Bug It Still Hasn't Fixed
Researcher Justin O'Leary found a critical Google Cloud IAM bypass in Config Connector; Google first praised it, then denied the bounty and left it unfixed.
AWS Secrets Manager Terraform: Least-Privilege Access
Learn how to implement least-privilege access in AWS Secrets Manager using Terraform with resource-based policies.