To stay up to date with updates to this website: subscribe to CloudSecList

logo
CloudSecDocs
Writeups
Initializing search
    • Home
    • Containers
    • Container Security
    • DevOps
    • AWS
    • Azure
    • GCP
    • Culture & Engineering
    • Cheatsheets
    • Home
        • CLI
        • Build
          • Components
          • Services
          • Service Catalog
          • Tekton
          • References
          • Deploy App Manually
          • Sample Apps
          • Kubectl
          • Kubeless
          • Docker Threat Model
          • K8S Threat Model
          • Authentication
          • Authorisation
          • Secure Config
          • API Server (Authn/Authz)
          • Network
          • Pod Security Standards
          • Writeups
            • Compromised Container
            • Create Over-Privileged Service Account
            • Get Reverse Shell (Docker/K8s)
            • Kubelet Exploit
            • AWS
            • GCP
          • Process
          • Resources
          • Docker Focus Areas
          • Secure Dockerfiles
          • Best Pratices
          • K8S Focus Areas
          • K8S Production Checklist
          • Managed
          • RBAC
          • Interaction
          • Audit
          • Falco
          • IAM
        • Frameworks
        • SDLC
          • Building
          • Secrets
          • Container Scanning
          • Compliance as Code
          • Security Scanners
          • CI/CD Providers
          • SLSA
          • Sigstore
          • Container Pipelines
        • Collaboration
        • Labs
          • Boundary
          • Terraform
          • Vault
          • Threat Modelling
          • Rapid Risk Assessment
          • AppSec
          • Pentest
          • Collecting Logs
          • Analyzing Logs
          • IAM
          • AD Federation
          • Architecture Best Practices
          • VPC Concepts
          • VPC Security
          • Route53
          • HSM & KMS
          • WAF & Shield
          • Comparison
          • Log Types
          • CloudTrail
          • CloudWatch
          • Config
          • Other
          • EC2
          • Load Balancers
          • Containers
          • Serverless
          • S3 & Glacier
          • Databases
          • Elasticache
          • Other
          • Serving Content
          • Managing Content
          • SQS & SNS
          • Data Manipulation
          • Writeups
          • Threats
          • Credentials Compromise
          • Process
          • Resources
          • AWS Security Maturity Roadmap
          • AWS Organizations Setup
          • Inherited AWS Account
          • Audit Considerations
          • Best Pratices
          • IAM
          • Logging
          • SCPs
          • Building an AWS Perimeter
          • Compliance
          • CLI
          • Audit
          • Visibility & Enforcement
          • IAM
          • Monitoring
          • Incident Response
        • Overview
          • Identities
          • Authentication & Access
          • Encryption
          • Network
          • API Management
          • Process
          • Resources
          • Best Pratices
          • Azure Security Baseline
          • Azure Security Roadmap
          • CLI
          • Audit
          • Visibility & Enforcement
          • IAM
          • Projects
          • IAM
          • Federation
          • Networking
          • VPC Security
          • Hybrid Connectivity
          • KMS
          • Other
          • Cloud Operations
          • Other
          • Compute Engine
          • Load Balancers
          • Serverless
          • Cloud Storage
          • Databases
          • Managing Content
          • Serving Content
          • Writeups
          • Process
          • Resources
          • Best Pratices
          • IAM
          • Org Policies
          • Logging
          • Compliance
          • CLI
          • Audit
          • Visibility & Enforcement
          • IAM
        • Security Programs
        • Engineering Decisions
        • Career Progression
        • Compensation
        • Job Hunt
        • Organizational Structures
        • Technical Leadership
        • Management
        • Bash
        • Cypher
        • Golang
        • Pipenv
        • Tmux
        • UFW

    Writeups

    Link Notes
    Fantastic AWS Hacks and Where to Find Them
    • Getting started in AWS security, and how companies are getting hacked on AWS
    • Related interactive mindmap
    Back to top
    Previous Data Manipulation
    Next Threats
    © 2020-present, Marco Lancini
    Made with Material for MkDocs