Learn Cloud Security
Page 4 of 14
How to enable DNSSEC Signing in Route53 using AWS CLI
Enabling DNSSEC signing increases trust between the user and the target AWS account ensuring that the integrity of the DNS record has not been tampered with and users are receiving information from the correct source. This article provides a step by step guide to enable DNSSEC signing in Route53 using AWS CLI.
How to set up GCP CIS 1.2.0 Benchmark Inspec Profile tool for conducting CIS assessment
This post covers an introduction and instructions to set up the Inspec tool for learning.
Log4j (CVE-2021-44228): Detection, Exploitation and Mitigation
Last week a vulnerability affecting the most common logging packages in Java, Log4j, was made public, complete with exploit code. The vulnerability is rated with a critical severity rating of 10. Successful exploitation allows for a very uncomplicated remote command execution without requiring any authentication over the Internet resulting in a complete compromise of data and system confidentiality, integrity and availability. This blogpost explains the detection methods, exploitation techniques and mitigation instructions of the vulnerability.
How to enable logging for elastic load balancer using AWS CLI
Logging requests to ELB endpoints is a helpful way of detecting and investigating potential attacks, malicious activity, or misuse of backend resources. Logs can be sent to S3 and processed for further analysis.
How to update AWS ELB HTTP Desync mitigation mode using AWS CLI
An AWS ELB with HTTP Desync mitigation mode set to **monitor** could allow a class of HTTP desynchronization attacks against the web server behind the Load Balancer. This article provides a step by step guide on how you can check and update the HTTP Desync mitigation mode for your ELB to a more secure option using AWS CLI.
How to update AWS ELB HTTP Desync mitigation mode
An AWS ELB with HTTP Desync mitigation mode set to **monitor** could allow a class of HTTP desynchronization attacks against the web server behind the Load Balancer. This article provides a step by step guide on how you can check and update the HTTP Desync mitigation mode for your ELB to a more secure option.
How to enable MFA for an IAM User using AWS CLI
AWS IAM provides multi factor authentication capabilities to its users which provides an additional layer of security. This article provides a step by step guide on how to enable multi factor authentication for users using AWS CLI.
5 important security settings you need to review for your GKE clusters
There are some very important settings related to security that you should regularly review in your Google Kubernetes Engine based K8S clusters
Cross Account IAM enumeration via Lambda Resource Policies in AWS Cloud
The article describes a side channel technique to use verbose messages returned by the AWS API to enumerate users and roles in a different AWS account. Article contains proof of concept python script as well.
How to enable logging for elastic load balancer
Logging requests to ELB endpoints is a helpful way of detecting and investigating potential attacks, malicious activity, or misuse of backend resources. Logs can be sent to S3 and processed for further analysis.
How to enable MFA for an IAM User in AWS
AWS IAM provides multi factor authentication capabilities to its users which provides an additional layer of security. This article provides a step by step guide on how to enable multi factor authentication for users in AWS.
How to enforce 2FA for all Cloudflare account members
Cloudflare allows to enforce 2FA for all members in the account. 2FA provides an additional layer of security. This article provides a step by step walkthrough of how you can enforce 2FA for all members on your Cloudflare account.