News for hackers. Stuff that matters.

bnchandrapal

bnchandrapal on Hacker News

Re:How not to get locked out of your AWS account on Monday May 26, 2025 @01:08AM (#44094146)
TL;DR: Add MFA to AWS root user. If you don't have MFA with root AND your email server of root email is hosted in same AWS account, it gets tricky to recover.

Sidenote, I was shocked to see "There was an AWS keypair saved in the CI secrets that hadn't been used since 2022."

Re:Well, it's just an AWS Account ID on Wednesday July 10, 2024 @12:31AM (#40923721)
Yes, you're right. Reading my statement in hindsight shows thats not correct. My intention was to convey that you can check for the existence of common IAM users and roles in the accounts (and even existence of company specific entities like users with first.last pattern, product names, etc) I've slightly updated the point a bit.
Re:Ask HN: Could you share your personal blog here? on Wednesday July 05, 2023 @10:49PM (#36610460)
https://badshah.io/

Blog posts on Cloud Security, DevSecOps and other personal experiments+experiences in security

RSS: https://badshah.io/index.xml

Re:AWS GuardDuty – the Good, the Bad, and the Ugly on Monday August 15, 2022 @11:14AM (#32470742)
Ahhh. AWS Control tower has not cost but it requires AWS Config to be enabled. Config is yet another AWS service that can get costly over time (if continuous monitoring of changes is enabled)
Re:AWS GuardDuty – the Good, the Bad, and the Ugly on Monday August 15, 2022 @02:16AM (#32466425)
Out of curiosity, did you have any data lakes on S3? Did you find optimization techniques for the same?
Re:AWS GuardDuty – the Good, the Bad, and the Ugly on Monday August 15, 2022 @12:18AM (#32465850)
There are a few AWS security services which are free/priced reasonably.

Some free services:

1. AWS Org (Disable services and enforce guardrails)

2. VPC (Create private networks)

3. IAM (User access and IAM policy analyzer to help with least priv)

4. IAM Access Analyzer (Alert on resources with cross account & public access)

5. SSM Inventory & Patch manager (Basic check if all VMs have security updates installed)

Reasonably priced IMO:

1. AWS WAF with free managed rules (when rightly configured you get lesser FP and high ROI)