CloudTrail
8 items across 3 sections
I Built a Free AWS IAM Activity Tracker Because CloudTrail Alone Isn't Enough
A serverless IAM activity monitoring tool that tracks IAM, STS, and console signin events across all AWS regions with real-time security alerts and long-term analytics.
The Agent's AWS Footprint
Part 15 of 16 in the AWS Security Agent: From Zero to Hero series. What AWS Security Agent leaves behind in your own account. CloudTrail events, Secrets Manager entries, and VPC Flow Logs, with the commands to audit and observe every run yourself.
AWS IAM Privilege Escalation: Paths, CloudTrail Events, and the Controls That Block Them
Twelve documented ways a limited IAM identity can raise its own permissions, the CloudTrail event each one leaves, and the AWS controls that block them. Commands and policies follow AWS documentation examples and the AWS CLI v2 reference.
Week 30 - July 20-26, 2026
GuardDuty gets an on-demand investigation agent in public preview, Secrets Manager starts publishing secret-change events to EventBridge, and CloudTrail learns to filter network activity logging by identity. Five more bulletins close out July, including a TLS 1.3 record-drop flaw in s2n-tls and a third AgentCore SDK patch this summer.
Week 40 - Sep 28 - Oct 4, 2026
Seven new AWS bulletins this week, led by a CVSS 10.0 authentication bypass in Loom, an AWS Labs agent orchestration platform, and a SageMaker Unified Studio flaw that, in projects with Trusted Identity Propagation enabled, could let a project contributor obtain another member's temporary role credentials. On the defensive side, Security Hub added remediation plans, GuardDuty can now be enforced through Organizations declarative policies, and CloudTrail now shows where data-event logging is missing.
AWS DynamoDB Security Best Practices
Comprehensive guide to securing Amazon DynamoDB. Covers CMK encryption, PITR, deletion protection, fine-grained access control, VPC endpoints, CloudTrail data events, resource-based policies, DAX encryption, and global tables security.
AWS CloudTrail Security Best Practices
Comprehensive guide to securing AWS CloudTrail. Covers organization trails, KMS encryption, log integrity validation, S3 bucket hardening, CloudWatch integration, data events, Network Activity Events, Insights, SCP anti-tampering, CloudTrail Lake, and continuous audit.
AWS Secrets Manager Security Best Practices
Comprehensive guide to securing AWS Secrets Manager. Covers automatic rotation, custom Lambda rotation, KMS encryption, resource policies, VPC endpoints, multi-region replication, batch retrieval, and continuous compliance.
Need Help with AWS Security?
Our AWS security experts can help you implement best practices across all these topics.
Contact Us