k9 Security Blog

k9 Security now summarizes principals’ access to the CloudTrail APIs and reports whether principals may administer, read, or delete trails.

k9 Security now summarizes principals’ access to the SQS APIs and reports whether principals may administer queue resources or read, write, or delete messages.

k9 Security now summarizes principals’ access to the STS APIs and reports whether principals may use resources, read data, or write data via the STS API. AWS Security Token Service (STS) is a service that enables you to request temporary, limited-privilege credentials...

k9 helps Cloud teams improve security policies and accelerate delivery processes with usable automation and audit tools. We’re making these tools simple and economical to adopt so you don’t have to compromise on security engineering. In November, k9 released resources...

Even with the best intentions and efforts, breaches happen and may seem impossible to prevent — especially when you’re delivering 10 changes to production every month, week, or day. In the Mission Impossible: DevSecOps talk at Big Mountain Data & Dev on October 22,...

k9 Security believes usable and robust infrastructure code libraries are essential in making best practice accessible to application delivery, cloud, and security teams. If every team has to reinvent the automation wheel, you’ll likely end up with an overbudget,...

The k9 Security team spent the summer learning about Cloud practitioners’ problems with AWS security and building solutions to those problems into k9. We’d like to share the most important enhancements with you, starting with k9 Security services: AWS Security Policy...

Creating good AWS security policies is difficult. The AWS security model is complex and difficult to understand, and application deployments are changing and growing rapidly.

k9 Security is happy to share a new Terraform module to help you protect your data in AWS S3 and go fast, safely. The tf_s3_bucket Terraform module creates an AWS S3 bucket with safe defaults and a least privilege bucket policy built on the k9 access capability model....

Improve security analysis by tagging Cloud deployments.