Introduction S3 buckets are often attacked and are a common cause of data loss. Scanning and reducing exposure are key to ensuring data integrity and security. The What This tool will help you scan all S3 buckets quickly and identify the riskiest for review via Powershell CLI. Pre-requisites How to install is laid out…

Introduction Quickly scanning all regions could help you identify stale resources that could potentially be removed, saving you money and risk. The What This tool will help you scan all AWS regions quickly via Powershell CLI. Pre-requisites How to install is laid out within the AWS documentation here: How to install Once done, you…

Introduction Security Groups can help isolate networks. Finding gaps and exposure may be tedious, so I’ve created a script to help. The What This tool will help you scan for ALL rules within Security Groups quickly via Powershell CLI. Pre-requisites How to install is laid out within the AWS documentation here: How to install …

Maybe not — A recent post caught my eye and It’s something I’ve discussed many of times:

What is container security? Container security isn’t new and there are a lot of vendors out there today pushing different variations of the same product. Picking a tool is the easy part but actually implementing standards with a design is easier said than done. …

Development, security, and operations Security has often caused friction within the Devops space. Security wants to be involved as they have the responsibility of securing the whole estate. Developers, on the other hand, like to have freedom and move forward with technology. In most cases, innovation happens within Devops. …

What is Azure DevOps? “Azure DevOps provides developer services for allowing teams to plan work, collaborate on code development, and build and deploy applications. Azure DevOps supports a collaborative culture and set of processes that bring together developers, project managers, and contributors to develop software. It allows organizations to create and improve products at…

Infrastructure as Code — What is it? Bicep is a domain-specific language (DSL) that uses a declarative syntax to deploy Azure resources. In a Bicep file, you define the infrastructure you want to deploy to Azure, and then use that file throughout the development lifecycle to repeatedly deploy your infrastructure. Source: Bicep language for deploying Azure resources…

Cloud Security — Infrastructure as code allows admins to deploy Infrastructure, faster and more consistently. It does this by creating a rinse and repeat process. The configuration and defined code is managed and secured ready to be used to deploy infrastructure to a standard. This increases automation and reduces the need for manual…