The Audit Question AWS Access Analyzer Can't AnswerJust before we get started, this article was motivated by two different talks, one from AWS re:inforce 2025 and the other at fwd:cloudsec Europe 2026 Ever been asked a question where the answer seems Sep 19 · 11 min readaudrey01.hashnode.dev
The IP address that Shouldn't Exist but doesImagine losing over a hundred million customers' data to the public overnight. That was Capital One's reality in 2019. Although multiple failures contributed to this breach, sitting at the center of tJul 27 · 8 min readaudrey01.hashnode.dev
Stop Googling It: How to Tell If an IP Address Is Public or PrivateIn the past, I have had difficulty understanding when an IP address is public or private, and I end up doing a Google search for every IP address I encounter. Although it's easier to understand the me12AJun 22 · 7 min readaudrey01.hashnode.dev
Beyond Shift Left: Runtime Security with Falco on AWS EKSThe whole concept of "Shift Left" revolves around proactive scrutiny, catching issues before they ever reach the environment where real users are. This spans everything from performance and reliabilit2May 25 · 9 min readaudrey01.hashnode.dev
The Hidden Risks of Public Read Access in S3 for Frontend AssetsA common approach to serving static assets in the AWS cloud is to upload files, such as images, PDFs, or icons, to an S3 bucket. A frequent “shortcut” many developers take is granting public read access to these objects, while this approach works fun...1Jan 16 · 5 min readaudrey01.hashnode.dev