Helpful IAM Links

High quality and independent AWS content from Andreas and Michael Wittig.

Assume AWS IAM roles from GitHub Actions workflows with no stored secrets

Security summaries and snark by the infamous Corey Quinn

Unauthenticated enumeration of services, roles, and users in an AWS account or i...

IAM Least Privilege Policy Generator

This tool is designed to prevent the deployment of unwanted IAM identity-based a...

Customizable policies that are more secure than the official official AWS Manage...

A Central Control Plane for AWS Permissions and Access

If you're struggling to deliver effective AWS security policies, this guide will...

Elevate your AWS IAM policy using IAM Access Analyzer policy validation

Identifies violations of least privilege in AWS and generates a report.

Use Terraform to create your own vulnerable by design AWS IAM privilege escalati...

A collection of the latest AWS Security workshops

Runs cloudsplaining on a local copy of all AWS IAM managed policies

The Cloud Security Podcast from Google is a weekly news and interview show with...

Access a collection of top-rated courses curated for in-demand AWS roles

The open-source cloud asset inventory powered by SQL.

A consolidated cloud IAM dataset

A collection of basics, tips, and gotchas for AWS services

A curated list of resources on managing accounts, users, roles, permissions, aut...

Cloud Security Podcast is a weekly Video and Audio Podcast that brings in Cloud...

Learn by doing with A Cloud Guru

A post by Nick Jones covering AWS Access Keys

Applying Academic Rigor to Curating the Best Security Research