DADevon Artisinclouddevsecops.hashnode.dev·May 6 · 11 min readThe identity conversation assumes agent sprawl is inevitable. It does not have to start that way. TL;DR: Your agent lives for 2 minutes. Its credential lives for 60. That mismatch is your attack surface. A broker that issues task-scoped, short-lived credentials closes the gap before the sprawl sta00
DADevon Artisinclouddevsecops.hashnode.dev·Aug 8, 2021 · 5 min readRemediating Noncompliant AWS Resources using AWS Native ToolsIn this post I have added fictitious scenario where I will define the problem and develop the simple solution that outlines an automated workflow that utilizes the tools that I wrote about in my first post How To Validate Internal Security Complianc...00
DADevon Artisinclouddevsecops.hashnode.dev·Apr 25, 2020 · 4 min readHow To Setup AWS Security Compliance Workflow Using AWS Native Tools and Atlassian JiraDisclaimer: The idea of leveraging technical controls to achieve compliance is wonderful, and should be utilized wherever and whenever possible. However, I don't want anyone to be misled to think you can pass an external compliance audit with only te...00
