SSulakshana KarunarathneOct 15 · 3 min readCatching over-permissive IAM in the pull request, not in productionOver-permissive IAM is one of the most common AWS misconfigurations: "Action": "*", iam:PassRole granted on every resource, a trust policy with "Principal": "*". The problem is usually found during andevseccloud.hashnode.dev
IIvan KlawdOct 8 · 13 min readBedrock Managed Agents: OpenAI Inside AWSBedrock Managed Agents: AWS Brings OpenAI Inside the Perimeter Enterprise agent programs have spent two years stuck on the same question. The most capable agent tooling is often tied to a model vendor1blog.thecgaigroup.com
MMuhammed Abdulakeem AkinpelumiOct 2 · 7 min readBuilding an Event-Driven Image Thumbnail ApplicationOne of the things I have been enjoying about learning cloud computing is seeing how different AWS services can work together to solve a practical problem. I recently completed a hands-on lab on AWS Lamuhakeem.hashnode.dev
AAdeshina EmmanuelSep 13 · 7 min readHow AWS Actually Evaluates IAM Policies (Identity vs Resource)Cloud Identity Security Engineering · #002Enterprise Reference Note The Core Question What is the precise evaluation order and interaction model between identity-based policies and resource-based poleadeshina.hashnode.dev
Jjoyce fosterSep 7 · 10 min readAWS IAM for Beginners: Understanding Users, Groups, Roles, and Policies.INTRODUCTION Brief overview of AWS IAM. IAM, which stands for ‘Identity and Access Management,’ is an essential feature of Amazon Web Services (AWS). It is the foundation upon which AWS infrastructur11Jtechbreakdown.hashnode.dev
MManu ShuklaAug 22 · 14 min readDynamoDB Streams ABAC shipped 19 August 2026 with a 7-day opt-out and a policy trapDynamoDB Streams ABAC shipped 19 August 2026 with a 7-day opt-out and a policy trap Summary. AWS announced attribute-based access control (ABAC) for Amazon DynamoDB Streams on 19 August 2026, in all cecorpit.hashnode.dev
MMadhumita CAug 20 · 7 min readAWS IAM: Understanding Users, Roles and PermissionsIntroduction Security is an important part of cloud computing because applications and services often handle sensitive information and important resources. In AWS, organizations need a way to control madhumitatech.hashnode.dev
RRutuja GophaneAug 8 · 10 min readAWS IAM SERVICEIAM(Access Management )Service Information: Every core concept, feature, example, and diagram you need to actually understand AWS Identity and Access Management — from first principles to real product2linuxhubwithrutuja.hashnode.dev
YYogeshwar PeelaJul 18 · 7 min readFAM CTF : The Cloud writeupSummary The target exposed a webhook endpoint (/internal/webhook) meant to act as an internal-only proxy, blocking direct requests to private and link-local IP ranges. That blocklist checked resolved exploitnotes.hashnode.dev
AAdeshina EmmanuelJun 13 · 5 min readAWS IAM Attack Paths: How Real Cloud Breaches Actually HappenMost people learn AWS IAM backwards. They start with: “Users, roles, and permissions” But real attackers and real security engineers think in a different model: AWS IAM is not a permission system —1eadeshina.hashnode.dev
