GCP
Security
Configuring Workload identity federation between GCP and AWS EKS
Configure Workload Identity Federation between GCP and AWS EKS for keyless cross-cloud authentication using OIDC — no long-lived credentials required.
Daniel Spangenberg •
Blog Archive Page 8 — Security
AWS
Security
Introducing AWS Resources View
The CloudQuery aws_resources view creates a single SQL pane across all AWS data, combining EC2, RDS, S3, IAM, and other resources into one queryable table.
Ron Eliahu •
AWS
Security
Fixing AWS SSO if you accidentally deleted SSO identity provider
Tutorial: what to do if you accidentally deleted the *_DO_NO_DELETE identity provider from an org account which is used by AWS SSO
Yevgeny Pats •
Security
Keyless access to AWS in GitHub Actions with OIDC
Configure keyless AWS access in GitHub Actions using OIDC and IAM Identity Center. Eliminate long-lived access keys for secure CI/CD pipeline authentication.
Mike Elsmore •
AWS
Security
Running AWS Foundational Security Best Practices with CloudQuery Policies
Automate, customize, codify and run AWS Foundational Security Best Practices with CloudQuery Policies.
Mike Elsmore •
Security
Running and Customizing NSA, CISA Kubernetes hardening guidance with CloudQuery Policies
Run NSA and CISA Kubernetes hardening checks with CloudQuery Policies. Automate Kubernetes security audits using SQL queries against your cluster inventory.
Daniel Spangenberg •
AWS
Security
Tutorials
Running AWS PCI DSS with CloudQuery Policies
Run PCI DSS compliance checks on your AWS environment using CloudQuery Policies. Automate PCI DSS auditing with SQL-based security policies for cloud assets.
Yevgeny Pats •
AWS
Security
AWS SSO And The Lost IAM Keys
Learn how AWS SSO and IAM Security best practices interact, and how to avoid losing IAM keys when using AWS SSO for federated access across accounts.
Yevgeny Pats •