Let's try all the different S3 encryption options, see why it's more like access control than encryption, and why that m...

What happens when marketing and cloud security get together without supervision? Enjoy our review of cloud security mark...

What can an attacker do if they can edit Terraform state? The answer should be 'nothing' but is actually 'take over your...

Think AWS account IDs are useful to attackers? Then these are all the places you might want to look to see if your accou...

How would you feel if an attacker could read your AWS resource tags? Turns out they can! We’ve found a way to enumerat...

AWS has publicly stated that account IDs are not considered sensitive, but in practice they do more heavy lifting than w...