404

The page you requested doesn't exist

We could not locate the page: /assets/usePublication-BvkDr2vX.js

Try one of the featured posts or search the archive below.

Featured Posts

Welcome to Cloud Security Lab A Week (SLAW)

You want free training? We got free training!

Rich Mogull

Announcing the CloudSLAW Patreon!

Always wanted to level up with bonus content and live support? Now you can!

Rich Mogull

Archive

Cross Account AWS Athena for SecOps (Security Operations/Incident Response)

Athena enables us to write SQL-like queries and search CloudTrail and other logs in S3 without any pesky databases. This can be an excellent tool for security operations when you aren't using a big expensive external tool.

Rich Mogull

Using the AWS CLI and Securing CloudShell

We've done a lot of clicky-clicky in the AWS console. Today we'll learn how to type our way to success with the AWS command line, all inside the console.

Rich Mogull

Schedule Security Scanning with a Serverless Fanout Pattern

Running scheduled scans at scale can be challenging, but we'll knock it out in mere seconds with this cool serverless design pattern.

Rich Mogull

Coding Security Autoremediations

For today's lab we’ll roll up our sleeves, pull out our development tools, and, well... mostly copy and paste, as you learn some techniques for coding security autoremediation.

Rich Mogull

Role Chaining and Testing Your Code

We set up for our role chain; now it's time to implement it in code, and learn how to test Lambda functions.

Rich Mogull

Secure a Role Chain on Both Sides

In this lab we'll learn how to tightly control our autoremediation role to prevent abuse, and use StackSets to push it out to only where we need it.

Rich Mogull

Serverless Security 101

In part 5 of our Epic Automation series we'll learn the basics of Lambda functions and how to use them securely, even for security, because we like security.

Rich Mogull

Announcing the CloudSLAW Patreon!

Always wanted to level up with bonus content and live support? Now you can!

Rich Mogull

Distributing and Testing Security Autoremediation Events

Learn how to efficiently distribute and test security autoremediation events in Part 4 of our Epic Automation series.

Rich Mogull

Centralize Security Triggers with StackSets and EventBridge

In part 3 of our series on Epic Automation, we will use CloudFormation StackSets to consistently deploy our EventBridge rule throughout a target OU.

Rich Mogull

Own (or PWN) the Org with CloudFormation StackSets

CloudFormation StackSets let you deploy anything everywhere, almost all at once. In Part 2 of our Epic Automation series we'll learn how to use them more securely, and why you need to lock them down.

Rich Mogull

Epic Cloud Security Automation: Fixing the Broken RCP

Due to limits in AWS condition keys, the Resource Control Policy we created won't work. We'll start implementing advanced automation to achieve the intended outcome.

Rich Mogull