Wiki

AWS

EKS Security

Resources for securing Amazon Elastic Kubernetes Service

Sep 2024 (edited Dec 2024)

AWS Service Control Policies

An index of resources for implementing and managing AWS SCPs

Jan 2024 (edited Nov 2024)

Lambda Security Risks

Security considerations for AWS Lambda functions

Jan 2023 (edited Sep 2024)

IMDSv2

Guides and tools for migrating to AWS Instance Metadata Service v2

Sep 2024

Security Programs

Real World SOC2

Practical guidance for SOC2 compliance

Jul 2023 (edited Dec 2025)

Phishing Simulations

A critical look at phishing simulation programs and alternatives

Jan 2024 (edited Nov 2025)

Startup Security Starter Pack

A curated set of resources for building security programs at early-stage companies

Jan 2023 (edited May 2025)

Identity

Just-in-Time Cloud Access

Patterns and tools for implementing JIT access to cloud environments

Dec 2023 (edited Dec 2025)

Deploying WebAuthn

Resources for implementing passwordless authentication with WebAuthn/FIDO2

Jan 2023 (edited Mar 2025)

Resources

Security Newsletters

Curated list of security newsletters worth subscribing to

Jan 2023 (edited Mar 2026)