Amazon Web Services

Cloud Providers

Terraform

Frameworks

Advancing your Security with Permission Boundaries

AWS IAM Deep Dive Chapter 2: Users, Groups, Roles, Policies

Open Source

Technical Themes

AWS IAM: Share ECR Docker Image and Secrets Between AWS Accounts

Designing Least Privilege AWS IAM Policies for People

AWS CloudFormation

Creating a Serverless Deploy User

AWS Cloud Delivery Kit. Define cloud infrastructure using familiar programming languages.

AWS CDK

AWS CloudFormation gives you an easy way to model a collection of related AWS and third-party resources, provision them quickly and consistently, and manage them throughout their lifecycles, by treating infrastructure as code. A CloudFormation template describes your desired resources and their dependencies so you can launch and configure them together as a stack.

Active Directory is a directory service developed by Microsoft for Windows domain networks. It is included in most Windows Server operating systems as a set of processes and services. Initially, Active Directory was used only for centralized domain management

Active Directory

Identity Providers

Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform, offering over 200 fully featured services from data centers globally. Millions of customers—including the fastest-growing startups, largest enterprises, and leading government agencies—are using AWS to lower costs, become more agile, and innovate faster.

Ansible is an open-source software provisioning, configuration management, and application-deployment tool enabling infrastructure as code. It runs on many Unix-like systems, and can configure both Unix-like systems as well as Microsoft Windows.

Ansible

CIS Benchmarks are best practices for the secure configuration of a target system. Available for more than 100 CIS Benchmarks across 25+ vendor product families, CIS Benchmarks are developed through a unique consensus-based process comprised of cybersecurity professionals and subject matter experts around the world.

CIS Benchmarks

Compliance Guidelines

Chef is a company and the name of a configuration management tool written in Ruby and Erlang. It uses a pure-Ruby, domain-specific language for writing system configuration recipes.

Chef

The Federal Risk and Authorization Management Program is a US government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services.

FedRAMP

Google Cloud Platform, offered by Google, is a suite of cloud computing services that runs on the same infrastructure that Google uses internally for its end-user products, such as Google Search, Gmail, file storage, and YouTube.

Google Cloud Platform

Kubernetes is an open-source container-orchestration system for automating computer application deployment, scaling, and management. It was originally designed by Google and is now maintained by the Cloud Native Computing Foundation.

Kubernetes

The Lightweight Directory Access Protocol is an open, vendor-neutral, industry standard application protocol for accessing and maintaining distributed directory information services over an Internet Protocol network.

LDAP

Microsoft Azure, commonly referred to as Azure, is a cloud computing service created by Microsoft for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.

Microsoft Azure

The National Institute of Standards and Technology is a physical sciences laboratory and non-regulatory agency of the United States Department of Commerce. Its mission is to promote American innovation and industrial competitiveness.

NIST

The Open Web Application Security Project is an online community that produces freely-available articles, methodologies, documentation, tools, and technologies in the field of web application security.

OWASP

Okta, Inc. is a publicly traded identity and access management company based in San Francisco. It provides cloud software that helps companies manage and secure user authentication into applications, and for developers to build identity controls into applications, website web services and devices.

Okta

Open-source software is computer software that is released under a license in which the copyright holder grants users the rights to use, study, change, and distribute the software and its source code to anyone and for any purpose. Open-source software may be developed in a collaborative public manner. 

The Payment Card Industry Data Security Standard is an information security standard for organizations that handle branded credit cards from the major card schemes. The PCI Standard is mandated by the card brands but administered by the Payment Card Industry Security Standards Council.

PCI-DSS

Pulumi's open source infrastructure as code SDK enables you to create, deploy, and manage infrastructure on any cloud, using your favorite languages.

Pulumi

Puppet is a software configuration management tool which includes its own declarative language to describe system configuration. It is a model-driven solution that requires limited programming knowledge to use. Related: See Chef, SaltStack, Ansible.

Puppet

SOC 2 is an auditing procedure that ensures your service providers securely manage your data to protect the interests of your organization and the privacy of its clients. For security-conscious businesses, SOC 2 compliance is a minimal requirement when considering a SaaS provider.

SOC 2

Serverless computing is a cloud computing execution model in which the cloud provider allocates machine resources on demand, taking care of the servers on behalf of their customers.

Serverless

Terraform is an open-source infrastructure as code software tool created by HashiCorp. Users define and provide data center infrastructure using a declarative configuration language known as HashiCorp Configuration Language (HCL), or optionally JSON.

The zero trust security model, sometimes known as perimeterless security, describes an approach to the design and implementation of IT systems.

IAM,THEREFOREI THINK?

New content from our members

Advancing your Security with Permission Boundaries

AWS IAM Deep Dive Chapter 2: Users, Groups, Roles, Policies

AWS IAM: Share ECR Docker Image and Secrets Between AWS Accounts

Designing Least Privilege AWS IAM Policies for People

Creating a Serverless Deploy User

Subscribe to our Newsletter

IAM,THEREFOREI THINK?

New content from our members

Advancing your Security with Permission Boundaries

AWS IAM Deep Dive Chapter 2: Users, Groups, Roles, Policies

AWS IAM: Share ECR Docker Image and Secrets Between AWS Accounts

Designing Least Privilege AWS IAM Policies for People

Creating a Serverless Deploy User

Subscribe to our Newsletter

Get the IAM Pulse Check Newsletter