Stop sharing plaintext secrets with your colleaguesThere are times when you have to share sensitive information with your colleague. It could be username/password to some dashboard or even to some database. It could be VPN credentials or even your Netflix password 馃し Sharing the plaintext password th...Mar 20, 2022 路 3 min readblog.thesecurityengineer.live
Implement SCP to enforce IAM user taggingWhenever an IAM user is created, it's best if it is tagged. The reason is simple... It gives more information about the user. One of the use-cases for user tagging could be to distinguish the user while running automation scripts. Various types of us...Mar 3, 2022 路 3 min readblog.thesecurityengineer.live
Implement AWS IAM Least Privilege at ScaleCreating an AWS IAM user is a common activity to access the AWS resources. Most often, the IAM user created is given the largest group of permissions. More often than not, the AdministratorAccess policy is attached if the user doesn't know which gran...Mar 2, 2022 路 7 min readaws.hashnode.com
Implement AWS IAM Least Privilege at scaleCreating an AWS IAM user is a common activity to access the AWS resources. Most often, the IAM user created is given the largest group of permissions. More often than not, the AdministratorAccess policy is attached if the user doesn't know which gran...Feb 20, 2022 路 7 min readblog.thesecurityengineer.live
Enforce MFA to AWS IAM usersWelcome to yet another blog post, where we learn how to enforce Multi-factor authentication to IAM users and ensure secure authentication. This solution will block access to all AWS resources until the user enables MFA on AWS. We will implement this ...Feb 4, 2022 路 8 min readblog.thesecurityengineer.live