k9 Security
  • Use Cases
    • DevOps
    • Enterprise Security
    • MDR & SOC
    • OEM Integrations
  • Demo
  • Pricing
  • Docs
  • Contact
  • About
  • Blog
  • Sign up
Select Page

Generate least-privilege EventBridge policies and restrict access to your AWS Organization with k9-cdk

by Stephen Kuenzli | Apr 10, 2026 | Announcements

Cross-account event buses are one of the most powerful integration patterns in AWS, and an easy place to make an access policy mistake. A single overly permissive Allow statement can let principals from outside your organization publish events to your bus. With k9-cdk...

k9 Security launches initial support for automated IAM security review with findings in OCSF format

by Chase Christy | Aug 22, 2025 | Announcements, Security

k9 Security now automates two critical IAM security review processes and produces high-signal findings in Open Cybersecurity Schema Framework (OCSF) format. This new capability significantly enhances your ability to identify and address critical IAM security risks in...

AWS IAM Users vs. Identity Center & JIT: Is Your Cloud Access Strategy Secure or Stalling?

by Chase Christy | Aug 15, 2025 | Guest blogs

This article was originally written by Cloudanix Introduction The way we manage access in AWS has changed IAM dramatically. When many organizations first ventured into the cloud, creating individual AWS IAM users directly within each account was standard practice....

Effective IAM News – 2025-05-16

by Chase Christy | Aug 1, 2025 | The Effective IAM Newsletter

NCC Group’s AI Red Team recently published key findings after penetration testing dozens of AI applications. Analyzing Secure AI Architectures reveals that major AI vulnerabilities stem not from model flaws, but from misunderstanding how AI systems interact with...

Effective IAM News – 2025-04-04

by Chase Christy | Jul 30, 2025 | The Effective IAM Newsletter

This Week’s Featured IAM Resource This week we are highlighting The Director’s Guide: IAM Security at Scale by Kyle Chrzanowski (Mandiant | Google Cloud) because it offers a concise, implementation-focused guide to architecting IAM at scale. The article defines...
« Older Entries

Recent Posts

  • How to Prioritize CVEs by Risk, Not Severity
  • Your MCP server on AgentCore Runtime fails its health check at `/mcp/`. Here’s how to fix it.
  • Severity is no longer a triage input. Risk scoring you own is.
  • Generate least-privilege EventBridge policies and restrict access to your AWS Organization with k9-cdk
  • Building Evals for an AI Agent: From Zero to Consistency Testing

Recent Comments

    Copyright 2026 K9 Security Inc.