by Steven Sutton | Mar 11, 2019 | Cloud, InfraAsCode, security, testing
The AWS IAM Simulator is a tool that enables you to test the effects of IAM access control policies. This tool helps when you find yourself manually performing actions to test a policy. The tool can simulate actions for any IAM entity or resource and for unique sets...
by Stephen Kuenzli | Jan 1, 2019 | Cloud, security
Are you overwhelmed by the avalanche of announcements that may or may not improve the security, reliability, and cost of your AWS Cloud deployments? Resolve to do less yourself by having AWS do more. In this post, we’ll highlight 5 of the biggest announcements...
by Steven Sutton | Oct 25, 2018 | Cloud, DevOps, intermediate, security, Skill
This article will show you how to assume a role and perform aws-cli commands in one account after authenticating via a user in a trusted account (e.g. using the Identity Account pattern). This article is the third and final in a series of instructional posts regarding...
by Steven Sutton | Oct 25, 2018 | Cloud, DevOps, introductory, security, Skill
This how-to will guide you through the configuration of IAM roles in aws-vault and assuming those roles so that you can execute AWS commands as that role while protecting your credentials. This article is the second in a series on using aws-vault to manage your AWS...
by Steven Sutton | Oct 22, 2018 | Cloud, DevOps, introductory, security, Skill
This article kicks off a series of posts describing how to use aws-vault, a third party tool that helps engineers store and use AWS credentials securely in their local development and operational environments. The series will cover: installing aws-vault and using it...
by Matt Hickie | Feb 4, 2018 | Cloud, DevOps, intermediate, security
You use AWS services. You use them for a company or for your personal projects. In all this excitement to use the AWS cloud you might have: allowed all developers to access many resources in your AWS account given yourself permanent keys and full admin access on...