Articles

How To Allow AWS Principals To Modify Only Resources They Create

Tuesday, April 22, 2025

Use this hidden technique if you want to allow users or services to create and modify resources without giving them access to any pre-existing resources.

Capital One Data Breach – A Cautionary Tale

Wednesday, April 16, 2025

Capital One lost hundreds of millions after being notified by a third party of an intruder that had been lurking in their AWS account for four months.