k9 Security Blog

AWS Access Analyzer Policy Generator analyzes an IAM user or role’s CloudTrail history and creates a least privilege IAM policy with only the actions that are in use (announcement). This policy generator looks like a great building block for minimizing AWS privileges...

AWS launched Access Analyzer Policy Checks to help you develop valid, secure policies and review existing policies. This post explains what the four types of policy checks do and how to start using them. The checks are available via console, CLI, and API...

Audit AWS IAM user credentials used in your environment with k9 Security. Reviewing these credentials use is an essential security and audit activity.

k9 Security now summarizes principals’ access to the Elastic Kubernetes Service (EKS) APIs. k9 reports whether IAM principals may administer or read EKS cluster and nodegroup configurations managed by AWS.

k9 Security now summarizes principals’ access to the Elastic Compute Cloud (EC2) APIs. k9 reports whether IAM principals may administer EC2 compute, network, and storage configurations and use or destroy those resources.

k9 Security now summarizes principals’ access to the Elastic Container Service (ECS) APIs and k9 reports whether IAM principals may administer ECS cluster, service, and task configurations or use ECS to run tasks.

k9 Security now summarizes principals’ access to the Lambda APIs and reports whether IAM principals may administer Lambda function configurations or use your deployed Lambda functions.

k9 Security now summarizes principals’ access to the Athena APIs. k9 reports whether IAM principals may administer Athena data catalog configurations and read or write data through Athena.

Redshift analysis capabilities help you identify which IAM users and roles can administer Redshift clusters, use clusters, or read, write or delete Redshift cluster data in your AWS accounts.

For our final update of 2020, I’m happy to share additional AWS services analyzed by k9, a service support matrix & roadmap, and a little CloudSec comic relief. Service analysis additions k9 now supports analyzing three more services: CloudTrail (announcement)Simple...