Cloud misconfigurations in DigitalOcean can have a devastating effect on businesses. If an organization doesn't apply the proper security measures when using DigitalOcean's cloud, data can be leaked and malicious activity can be carried out that harms the business. This can be especially damaging to smaller businesses and start-ups, where a misconfiguration can quickly consume a significant portion of their budget.
There are some very important settings related to security that you should regularly review in your Google Kubernetes Engine based K8S clusters Riyaz Walikar
AWS IAM Roles Anywhere is a feature that allows non AWS workloads (servers, containers, apps etc.) to obtain temporary security credentials in IAM. These workloads can use the same IAM policies and IAM roles that AWS compute resources use with AWS applications to access AWS cloud.
For any managed service on AWS, the more you rely on IAM for authentication and authorization, the more you reduce your attack surface. In this article, we will see how we can create users of various permission levels in an AWS EKS cluster and map the user to an AWS IAM user.
This article gives introduction on Service Control Policies (SCPs) in AWS .
On AWS, Lambda Authorizers are frequently used with API Gateway, however, one must be careful when working with the policy documents for Lambda Authorizers. This tech talk by Alexandre & Leonardo takes you through interesting examples to showcase the attack vectors for APIs using the AWS API Gateway Lambda Authorizers.
