Archive

Cross Account AWS Athena for SecOps (Security Operations/Incident Response)

Cross Account AWS Athena for SecOps (Security Operations/Incident Response)

Athena enables us to write SQL-like queries and search CloudTrail and other logs in S3 without any pesky databases. This can be an excellent tool for security operations when you aren't using a big expensive external tool.

Rich Mogull
Rich Mogull
Using the AWS CLI and Securing CloudShell

Using the AWS CLI and Securing CloudShell

We've done a lot of clicky-clicky in the AWS console. Today we'll learn how to type our way to success with the AWS command line, all inside the console.

Rich Mogull
Rich Mogull
Schedule Security Scanning with a Serverless Fanout Pattern

Schedule Security Scanning with a Serverless Fanout Pattern

Running scheduled scans at scale can be challenging, but we'll knock it out in mere seconds with this cool serverless design pattern.

Rich Mogull
Rich Mogull
Coding Security Autoremediations

Coding Security Autoremediations

For today's lab we’ll roll up our sleeves, pull out our development tools, and, well... mostly copy and paste, as you learn some techniques for coding security autoremediation.

Rich Mogull
Rich Mogull
Role Chaining and Testing Your Code

Role Chaining and Testing Your Code

We set up for our role chain; now it's time to implement it in code, and learn how to test Lambda functions.

Rich Mogull
Rich Mogull
Secure a Role Chain on Both Sides

Secure a Role Chain on Both Sides

In this lab we'll learn how to tightly control our autoremediation role to prevent abuse, and use StackSets to push it out to only where we need it.

Rich Mogull
Rich Mogull
Serverless Security 101

Serverless Security 101

In part 5 of our Epic Automation series we'll learn the basics of Lambda functions and how to use them securely, even for security, because we like security.

Rich Mogull
Rich Mogull
Announcing the CloudSLAW Patreon!

Announcing the CloudSLAW Patreon!

Always wanted to level up with bonus content and live support? Now you can!

Rich Mogull
Rich Mogull
Distributing and Testing Security Autoremediation Events

Distributing and Testing Security Autoremediation Events

Learn how to efficiently distribute and test security autoremediation events in Part 4 of our Epic Automation series.

Rich Mogull
Rich Mogull
Centralize Security Triggers with StackSets and EventBridge

Centralize Security Triggers with StackSets and EventBridge

In part 3 of our series on Epic Automation, we will use CloudFormation StackSets to consistently deploy our EventBridge rule throughout a target OU.

Rich Mogull
Rich Mogull
Own (or PWN) the Org with CloudFormation StackSets

Own (or PWN) the Org with CloudFormation StackSets

CloudFormation StackSets let you deploy anything everywhere, almost all at once. In Part 2 of our Epic Automation series we'll learn how to use them more securely, and why you need to lock them down.

Rich Mogull
Rich Mogull
Epic Cloud Security Automation: Fixing the Broken RCP

Epic Cloud Security Automation: Fixing the Broken RCP

Due to limits in AWS condition keys, the Resource Control Policy we created won't work. We'll start implementing advanced automation to achieve the intended outcome.

Rich Mogull
Rich Mogull
FirstBack
1234567
Next Last