🧰 AWS IAM

The items that name it 39

• “Black October” for AI Developer Platforms
  writeupas classification.technologies2026-10-30
• [tl;dr sec] #351 - PHP2Shell, Autopatching Skills, AWS Pathrunner
  articleas classification.technologies2026-10-22
• Best practices for integrating IAM Roles Anywhere with your PKI
  articleas classification.technologies2026-10-21
• Datadog pathrunner: AWS IAM privilege escalation framework
  toolas affected products2026-10-20It is written here as AWS IAM (privilege escalation paths between IAM principals, as catalogued in pathfinding.cloud).

  privilege escalation paths between IAM principals, as catalogued in pathfinding.cloud

• Penetration testing every deployment with AWS Continuum
  articleas classification.technologies2026-10-14
• Quantum-resistant signing on AWS, Part 2: Enforce your ML-DSA algorithm policy with SCPs and IAM
  articleas classification.technologies2026-10-12
• AgentCorruption: How A Single Prompt Collapsed The Entire Cloud Security Model
  writeupas classification.technologies2026-10-08
• Configuring your AI vulnerability harness, Part 2: The steering file
  articleas tools2026-10-07

  Identity and access management service; used as an access-limiting (authentication/authorization) control distinguished from attack-blocking controls in the steering file's scoring logic

• Improving SPIRE security and resiliency with AWS managed services
  articleas tools2026-10-06

  Authentication for Aurora database user and access control for managed services

• Identity-aware AI data agents with AWS Lake Formation and Trusted Identity Propagation
  articleas classification.technologies2026-10-06
• Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access
  writeupas classification.technologies2026-10-06
• The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub
  writeupas affected products2026-09-29It is written here as AWS IAM (svc_automation service account).

  svc_automation service account

• ICYMI: August 2026 @AWS Security
  articleas classification.technologies2026-09-23
• Transforming Bedrock Guardrails events into OCSF with CloudWatch
  writeupas classification.technologies2026-09-21
• Run open weight models on Amazon Bedrock in AWS European Sovereign Cloud
  articleas classification.technologies2026-09-17
• Exploring the new AWS Sign Up experience
  writeupas affected products2026-09-17

  IAM user with access key could be created in sandbox (with warnings); console sign-in password setup was prevented

• Architecting a secure landing zone in the AWS European Sovereign Cloud
  articleas classification.technologies2026-09-16
• AWS STS simplifies session token size limits and adds session token size monitoring
  articleas classification.technologies2026-09-15
• Operationalizing least privilege: Automate IAM remediation through your CI/CD pipeline
  writeupas classification.technologies2026-09-15
• AWS Security Reference Architecture: A deep dive into PCI DSS compliance
  articleas classification.technologies2026-09-14
• Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise
  writeupas classification.technologies2026-09-09
• Incident response guide for AWS CloudTrail investigations – Part 2 | Amazon Web Services
  writeupas classification.technologies2026-09-03
• Incident response guide for AWS CloudTrail investigations – Part 1 | Amazon Web Services
  writeupas affected products2026-09-03It is written here as AWS IAM (Identity and Access Management).

  Identity and Access Management

• Runtime Security for AWS CodeBuild-Hosted GitHub Actions Runners
  articleas classification.technologies2026-09-02
• Password spraying campaign targets AWS root user accounts across 150+ organizations
  articleas affected products2026-08-31
• [tl;dr sec] #343 - Hugging Face Technical Report, AWSHound, OWASP Agentic Skills Top 10
  articleas classification.technologies2026-08-27
• IAM Policy Autopilot
  repoas affected products2026-08-25It is written here as AWS IAM (identity-based policies).

  Target of generated baseline policies; resource-based policies (e.g. S3 bucket policies, KMS key policies), Resource Control Policies (RCPs), Service Control Policies (SCPs), and permission boundaries are not supported

• AWSHound: An Open-Source AWS OpenGraph Collector
  writeupas classification.technologies2026-08-19
• A few notes on AWS Nitro Enclaves: KMS integration
  writeupas classification.technologies2026-08-05
• Orca Security: Cloud Identity & Entitlement Management Series
  articleas classification.technologies2026-07-31
• The Two Mitigations for the Service-Account Confused Deputy in the Cloud
  articleas classification.technologies2026-07-09
• DataDog/pathfinding-labs
  repoas classification.technologies2026-07-04
• Orca Security: ITDR for the Cloud
  articleas classification.technologies2026-07-03
• Observing Privilege Escalation in Kubernetes (EKS CloudWatch Observability Add-on)
  writeupas classification.technologies2026-06-01
• AWS MCP Server (GA)
  articleas classification.technologies2026-05-24
• Orca Security: AI Security Tools: How to Evaluate Them Across Every ML Attack Phase
  articleas classification.technologies2026-05-21
• Orca Security: GenAI Risks in Cloud Environments
  articleas classification.technologies2026-05-18
• CVE-2026-16584: Improper handling of an initialization failure in AWS API MCP Server from 0
  advisoryas classification.technologies
• AWSHound — AWS BloodHound OpenGraph Collector
  repoas affected products

  authorization data collected for graph building