Resource Control Policies in Amazon Web Services (AWS) are a set of rules and guidelines that govern how resources within the AWS environment can be accessed, managed, and utilized. These policies are used for maintaining security, compliance, and efficient resource management in cloud environments. RCPs can help organizations define who can access specific resources, what Read More …
Tag: amazon cloud
ELB – Elastic Load Balancer
Elastic Load Balancer is a service provided by Amazon Web Services that automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, and IP addresses. ELBs are essential for ensuring high availability, fault tolerance, and scalability of applications hosted in the cloud. Here’s a detailed overview of what an ELB means Read More …
CNI – Container Network Interface
A Container Network Interface is a component in Kubernetes, particularly in Amazon’s Elastic Kubernetes Service. It defines how network interfaces are configured for containers, enabling them to communicate with each other and with external resources. Key Features of CNI Network Configuration: CNI provides a standardized way to configure network interfaces for containers. When a container Read More …
Tool Overview – Shimit
Shimit is a Python-based tool that facilitates the execution of the Golden SAML attack. This attack method allows an adversary to forge SAMLResponse objects, which are then used to bypass authentication and gain unauthorized access to applications relying on SAML for single sign-on. By crafting a signed SAMLResponse, attackers can impersonate any user and achieve Read More …
Cloud Formation Example
Imagine you’re a System Administrator tasked with setting up a new environment. Traditionally, this involves a long checklist: log into the console, click through menus to create a VPC, spin up three VMs, configure storage, attach security groups, and set up a load balancer. If you need a second environment for testing, you have to do Read More …
Zig: The New Foundation for Modern Malware
This year Zig has moved from a niche systems language to a new primary choice for high-sophistication malware in 2026. Its design as a “better C” provides the low-level control required for weaponization without the legacy baggage that makes C code prone to crashes or easy detection. Is Zig is Over passing C and Rust Read More …
Pragmatic Cloud Networking?
Managing service-to-service communication across multiple Amazon Virtual Private Clouds has always presented challenges. The complexities of VPC peering, intricate routing tables, and the manual overhead of maintaining security policies. Amazon VPC Lattice can help address some of these issues by providing a unified, managed networking service that streamlines connectivity, security, and observability for applications built Read More …
Demystifying VDI with AppStream
I’ve seen technology trends come and go, but one area that continues to evolve is the virtual desktop. The age of complex, on-premise Virtual Desktop Infrastructure is fading in my opinion and it will slowly be replaced by the agility of cloud-native solutions. A recent dive into Amazon AppStream and its potential as a “Citrix Read More …
Invictus :: Profiling TraderTraitor
TraderTraitor, a DPRK-nexus threat actor known for state-sponsored financial gain to fund North Korea’s nuclear weapons programs and engage in espionage. TraderTraitor primarily targets AWS environments, the cryptocurrency industry, and adjacent financial sectors through supply chain compromise, credential theft, and cloud service abuse. They are responsible for major crypto heists, including $625 million from the Read More …