Some organizations require that all outbound application traffic run through an HTTP proxy so that traffic can be inspected and limited to certain allowlisted domains. But how do you test your application to verify your client libraries have all been configured to use...
The most usable cloud access spreadsheet
Spreadsheets take a lot of flack but they’re often the right tool for the job. When the job is starting to clean up that ‘dirty kitchen sink’ AWS account or ad-hoc IAM permission analysis, a spreadsheet is often the right tool. Now that analysis is easier with k9’s IAM...
k9 now analyzes access to AWS Account APIs
k9 Security now analyzes principals’ access to the AWS Account APIs. The Account (account) APIs manage important global configurations, including what regions are enabled, contacts for the account, and even enable closing the account. k9 reports whether IAM principals...
k9 Security AWS IAM Access Analyzer v2 (“Husky”)
Togo, the Siberian Husky famous for his efforts delivering diphtheria serum to Nome Alaska in 1925; photo from 1921 k9 Security has completed deployment of our v2 AWS access analyzer, “Husky”, to all customer accounts! k9 Security has always strived to help customers...
How S3 is changing the handling of the root identity in Bucket Policy on October 20, 2023
Amazon S3 is changing the handling of the root identity in bucket policy on October 20, 2023. AWS is known for security and backwards compatibility, so what’s the deal? AWS announced this change via email in February with follow-up to affected accounts in September....
