CMConor Maherinconormaher.com·Feb 11, 2023 · 6 min readRobust logical isolation using AWS STS Scope Down PoliciesWe will refer to this pyramid throughout the article. This is not an official AWS diagram, just my opinion encoded in a pyramid which makes it look more legit. AWS Organizations and Accounts The AWS Account boundary is the ultimate in logical isolat...00
CMConor Maherinconormaher.com·Dec 7, 2021 · 6 min readCrafting Least Privilege IAM PoliciesIntro Creating least privilege policies is an integral part of creating secure AWS workloads. A least privilege policy can : reduce blast radius in the event of a breach. prevent bad application logic from deleting critical resources. prevent "cross...00
