As we all know by now, Infrastructure as Code (IaC) is creating an incredible opportunity for those who care about security: enforcing security and compliance… Read More

After I listened to Ashish Rajan’s Cloud Security Podcast, episode “Building Cloud Security Roadmap”, I finally had the chance to read the AWS Security Maturity… Read More

As Infrastructure as Code is becoming mainstream, organizations are leveraging additional tools to extend IaC functionality, whether it’s a matter of making IaC more manageable,… Read More

Single Sign-on with SAML 2.0  Organizations have been moving to centralize their user access either through third party identity management SaaS services, such as Azure… Read More

Organizations want to provide guardrails for developers to protect them from misconfigurations and unintentionally creating security issues in the cloud. These guardrails can be as… Read More

Cloudrail allows users of IaC to use AWS’s new policy validation capabilities within the CI/CD pipeline, without any additional work.

Leaving unused roles in your AWS environment can cause real trouble. Cloudrail can identify unused roles managed by your Terraform code and alert you within CI.

Cloudrail allows users of IaC to use AWS’s new policy validation capabilities within the CI/CD pipeline, without any additional work.

Cloudrail allows users of IaC to use AWS’s new policy validation capabilities within the CI/CD pipeline, without any additional work.

Learn how to use IaC security tools to build secure S3 buckets from the get-go, instead of fixing them after they’re in production.

Cloudrail allows users of IaC to use AWS’s new policy validation capabilities within the CI/CD pipeline, without any additional work.

The AWS Well-Architected Framework includes some of the best practices for cloud architects to follow. Following these best practices is a way to ensure that… Read More

So, your team, or even possibly your entire organization, has decided to standardize on using infrastructure-as-code to define IAM entities within cloud environments. For example,… Read More

Check Point Device Hardening  Device hardening is a necessary step to ensure your security devices do not have any potential loopholes which can be exploited… Read More

A lot has been written about the potential for privilege escalation in AWS, due to the use of permissive IAM permissions. These permissions, which may… Read More

Organizations want to create different policies for different accounts. For example, you have a baseline security policy that is the minimum set of requirements acceptable… Read More

In today’s competitive market, our success depends on how quickly we can innovate and deliver value to customers. It’s all about speeding time to market… Read More

Improving DevSecOps Collaboration By Automating IaC Analysis  You are running towards the finish line as quickly as possible to release your new product but unfortunately,… Read More