MGMario Gongorainblog.leastprivilege.cloud·Aug 15 · 11 min readWriting an IAM Policy That's Actually Least PrivilegeI wrote the IAM policy for my solar agent myself, on the first try, thinking I had done it right. I had not, entirely. The agent behind the last article does two things: it reads one secret from Secre00
MGMario Gongorainblog.leastprivilege.cloud·Aug 15 · 11 min readWriting an IAM Policy That's Actually Least PrivilegeI wrote the IAM policy for my solar agent myself, on the first try, thinking I had done it right. I had not, entirely. The agent behind the last article does two things: it reads one secret from Secre00
MGMario Gongorainblog.leastprivilege.cloud·Aug 13 · 8 min readIAM Roles Anywhere: AWS Access With Zero Static KeysEvery environment I have audited has the same ghost. An IAM user with an access key and a secret key. Created for a script, a cron job, a device that needed to reach AWS. It worked, so nobody touched 00
MGMario Gongorainblog.leastprivilege.cloud·Aug 13 · 8 min readIAM Roles Anywhere: AWS Access With Zero Static KeysEvery environment I have audited has the same ghost. An IAM user with an access key and a secret key. Created for a script, a cron job, a device that needed to reach AWS. It worked, so nobody touched 00
MGMario Gongorainblog.leastprivilege.cloud·Aug 13 · 8 min readIAM Roles Anywhere: AWS Access With Zero Static KeysEvery environment I have audited has the same ghost. An IAM user with an access key and a secret key. Created for a script, a cron job, a device that needed to reach AWS. It worked, so nobody touched 00