News for hackers. Stuff that matters.

A comment on The State of AWS Security. Parent comment

Re:The State of AWS Security by christophetd on Wednesday October 12, 2022 @08:17AM (#33175831)
Hello! One of the authors here.

We did release some (hopefully) actionable guidance alongside the study[1].

Trusted Advisor is a fair point, but note that most of its security checks only come with the Business or above AWS support plan. IAM Access Analyzer is a great service but it currently supports only 6 resource types[2].

We'll look into adding both, appreciate the feedback!

[1]: https://securitylabs.datadoghq.com/articles/state-of-aws-clo...

[2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/access-anal...

[ Parent | on HN ]
Re:The State of AWS Security by cloudy_future on Wednesday October 12, 2022 @10:35AM (#33177592)
"most of its security checks only come with the Business or above AWS support plan"

Another fair point is Datadog also charges for its product.

[ Parent | on HN ]
Re:The State of AWS Security by christophetd on Wednesday October 12, 2022 @10:39AM (#33177665)
Sure. My point is that Trusted Advisor is also a commercial product, as opposed to IAM Access Analyzer which is free.
[ Parent | on HN ]