PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Glossary of Relevant AWS Terms

bishopfox.com | blog | #cloud | #cloud-security | #aws | #iam | #glossary | #reference
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A glossary of core AWS/IAM terms — account, policy, role, principal, trust policy, and more — appended to Bishop Fox's research on AWS privilege escalation.
Published
Collected

Related coverage

blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
blog · wiz.io
A security community success story of mitigating a misconfiguration
The story of fixing a common misconfiguration: GitHub Actions OIDC trust policies missing their 'sub' condition let anyone assume AWS roles, until coordinated research pushed defaults to change.
blog · vercel.com
Introducing Vercel Firewall and Vercel Secure Compute
Vercel Secure Compute and Vercel Firewall for enhanced protection of your applications on the frontend cloud
blog · aikido.dev
Adding Aikido AI pentesting to your existing security stack
How to add Aikido's AI pentesting on top of the SAST, SCA and cloud tools you already run, from your first pentest through whitebox testing, continuous testing and remediation.
blog · aikido.dev
Aikido achieves AWS Security Competency for Application Security
AWS granted Aikido the Security Competency for Application Security after technical and commercial validation. The platform unifies code, dependency, container, IaC and runtime security checks.
blog · aikido.dev
The 'no nonsense' list of security acronyms
A plain-language glossary decoding security acronyms like CVE, SAST, and DAST, explaining what each means for developers and whether it deserves attention amid vendor acronym fatigue.
Back