AWS
Security
Outdated Default AWS IAM Policy Language Versions
AWS has two versions for writing JSON IAM policies, and using the wrong one creates issues with policy variables and wildcard conditions you may not expect.
Jason Kao •
Blog Archive Page 7: AWS
AWS
FinOps
Tutorials
How to Enrich AWS Cost and Usage Data with Infrastructure Data in Amazon Athena
Query AWS Cost and Usage Reports in Athena using CloudQuery. Combine billing data with infrastructure inventory for cost attribution and FinOps analysis.
Jason Kao •
AWS
Tutorials
How to Load Infrastructure Data into AWS Athena
Load CloudQuery infrastructure data into AWS Athena for serverless SQL queries. Covers S3 export, Glue catalog setup, and running infrastructure queries.
Herman Schaaf •
AWS
Security
S3 Security Settings for Enabling S3 Block Public Access and Disabling ACLs
How CloudQuery can help find AWS S3 Bucket and Account Settings for Block Public Access and Access Control Lists (ACLs).
Jason Kao •
AWS
Security
Tutorials
Finding Cross-Account AWS EventBridge Usage
Learn how a CloudQuery customer used custom SQL queries to find cross-account AWS EventBridge usage and strengthen their event-driven security posture.
Jason Kao •
AWS
Tutorials
AWS KMS Key Grants Explained: Access Control & Security Audit
Understand AWS KMS key grants, audit encryption key access across accounts, and identify security risks from forgotten or unauthorized grants.
Jason Kao •
AWS
Security
Tutorials
How to Set Up Cross Account Access in AWS with AssumeRole
How to set up cross account access in AWS for variety of use-cases such as audit, security and compliance at scale.
Ben Bernays •
AWS
Tutorials
How to Deploy CloudQuery into an AWS Organization
Tutorial for setting up AWS IAM permissions in an AWS Organization so that CloudQuery can fetch all resources in all accounts
Ben Bernays •