Recently, AWS announced that you can assign multiple MFA devices to your IAM users, including the root user. Watch the video below for a step by step walkthrough of how to set up your second MFA device and what to do if your device is lost or broken. Resources:...

k9 Security now analyzes principals’ access to the Amazon Elastic Container Registry (ECR) APIs. k9 reports whether IAM principals may administer, read, write, and delete ECR image registries and repositories. Amazon ECR is a fully managed Docker container registry...

k9 Security now analyzes principals’ access to the AWS Systems Manager APIs (ssm). k9 reports whether IAM principals may administer, read, write, and delete Systems Manager resources. AWS Systems Manager gives you visibility and control over AWS and on-premises...

Now you can verify the effects of AWS IAM policy changes quickly by analyzing an AWS account’s IAM permissions on-demand with the k9 CLI‘s analyze account command. This command helps Cloud teams and consultants tighten the security policy engineering loop. Suppose...

Now you can quickly identify risks to your data and encryption resources with the k9 CLI. Sifting through the access capabilities in an AWS account with many resources and principals can be daunting, especially because some analysis rules vary by AWS account. So now...