In this blog post, we delve into using Amazon Web Services (AWS) data protection services such as Amazon Secrets Manager, AWS Key Management Service (AWS KMS), and AWS Certificate Manager (ACM) to help fortify both the security of the pipeline and security in the pipeline. We explore how these services contribute to the overall security […]
Read moreCedar is an open-source language that you can use to write policies and make authorization decisions based on those policies. AWS security services including AWS Verified Access and Amazon Verified Permissions use Cedar to define policies. Cedar supports schema declaration for the structure of entity types in those policies and policy validation with that schema. […]
Read moreAWS Signer is a fully managed code-signing service to help ensure the trust and integrity of your code. It helps you verify that the code comes from a trusted source and that an unauthorized party has not accessed it. AWS Signer manages code signing certificates and public and private keys, which can reduce the overhead […]
Read moreIn this blog post, I introduce IAM Policy Validator for AWS CloudFormation (cfn-policy-validator) , an open source tool that extracts AWS Identity and Access Management (IAM) policies from an AWS CloudFormation template, and allows you to run existing IAM Access Analyzer policy validation APIs against the template. I also show you how to run the […]
Read moreI’m very happy to announce that the Protection Information Systems Company (DISA) has authorized 17 additional Amazon Web Providers (AWS) providers and functions in the AWS GovCloud (US) Areas, bringing the full total to 105 solutions and major features which are certified for use by the U.S. Section of Protection (DoD). AWS now provides additional […]
Read more
You must be logged in to post a comment.