NEW: The State of AWS Security 2026 - Free WhitepaperFree AWS Security Whitepaper

MFA

6 items across 4 sections

Playbooks1

Unauthorized Root Account Access

Root credentials compromised or abused

CRITICAL · 10-15 min

Blog Posts2

Episode 2: The MFA Enforcement Scanner - Automating Your Security Blind Spot

Build an automated MFA compliance scanner that identifies IAM users with console access but no MFA enabled, with risk-based prioritization and Lambda monitoring.

14 min read · 2025-09-03

Anatomy of a Real AWS Breach: Code Spaces, 2014

A single compromised AWS console login, no MFA, and a company was gone within 12 hours. The full story, and why "our backups are in AWS too" was the real failure.

6 min read · 2026-09-22

Weekly News1

Week 26 - June 22-28, 2026

GuardDuty previews AI-powered investigations, and AWS Sign-In gains resource-based policies plus RCPs that lock console access to expected networks. Researchers deliver a triple hit: Unit 42's universal bucket hijacking, a targeted AWS-console phishing kit that handles MFA, and Wiz's disclosure of an Amazon Q Developer flaw that leaked AWS credentials on repo open.

2026-06-22 - 2026-06-28

Best Practices2

AWS IAM Security Best Practices

Comprehensive guide to securing AWS Identity and Access Management. Covers MFA enforcement, least privilege, IAM Identity Center, SCPs, Access Analyzer, and credential management.

18 min read

Amazon Cognito Security Best Practices

Comprehensive guide to securing Amazon Cognito user pools and identity pools. Covers MFA enforcement, advanced threat protection, password policies, WAF integration, JWT verification, Lambda trigger security, and identity pool least privilege.

15 min read

Need Help with AWS Security?

Our AWS security experts can help you implement best practices across all these topics.

MFA