<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>AWS IAM &#8211; Noise</title>
	<atom:link href="https://noise.getoto.net/tag/aws-iam/feed/" rel="self" type="application/rss+xml" />
	<link>https://noise.getoto.net</link>
	<description>The collective thoughts of the interwebz</description>
	<lastBuildDate>Wed, 21 Oct 2026 17:03:50 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.1.3</generator>
	<item>
		<title>Best practices for integrating IAM Roles Anywhere with your PKI</title>
		<link>https://noise.getoto.net/2026/10/21/best-practices-for-integrating-iam-roles-anywhere-with-your-pki/</link>
		
		<dc:creator><![CDATA[Abhishek Avinash Agawane]]></dc:creator>
		<pubDate>Wed, 21 Oct 2026 17:03:50 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[AWS Certificate Manager]]></category>
		<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=2772b39edb2c376ceeca41059778b800</guid>

					<description><![CDATA[Using temporary credentials is a security best practice to reduce the risk from credentials getting compromised. With AWS IAM Roles Anywhere, now your workloads outside of Amazon Web Services (AWS) will be able to access AWS resources by obtaining temporary security credentials in AWS Identity and Access Management (IAM). IAM Roles Anywhere relies on public […]]]></description>
		
		
		
			</item>
		<item>
		<title>Operationalizing least privilege: Automate IAM remediation through your CI/CD pipeline</title>
		<link>https://noise.getoto.net/2026/09/15/operationalizing-least-privilege-automate-iam-remediation-through-your-ci-cd-pipeline/</link>
		
		<dc:creator><![CDATA[Luis Pastor]]></dc:creator>
		<pubDate>Tue, 15 Sep 2026 15:53:51 +0000</pubDate>
				<category><![CDATA[AWS CloudTrail]]></category>
		<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[AWS Organizations]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[Expert (400)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=d7a2202eb0ea0b09724163f06161151a</guid>

					<description><![CDATA[The principle of least privilege is straightforward to articulate but challenging to maintain at scale. When teams first deploy applications to AWS, they often grant broader permissions than strictly necessary; it’s faster to get things working, and the plan is always to tighten permissions later. But later rarely comes. Permissions accumulate, AWS Identity and Access […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Updates to your AWS Sign-In experience</title>
		<link>https://noise.getoto.net/2026/08/17/updates-to-your-aws-sign-in-experience/</link>
		
		<dc:creator><![CDATA[Vaibhav Chowla]]></dc:creator>
		<pubDate>Mon, 17 Aug 2026 17:22:33 +0000</pubDate>
				<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=dfcae21c93537cfbe367330b08f578ce</guid>

					<description><![CDATA[Amazon Web Services (AWS) is gradually introducing updates to the AWS Sign-In and sign-up experience to a limited number of customers. We’re sharing these changes so you will know what to expect as we gradually make the updated experience available to more customers. These updates include new options for creating and accessing AWS accounts. To […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>How AWS IAM role manager rethinks the starting point for IAM roles</title>
		<link>https://noise.getoto.net/2026/08/13/how-aws-iam-role-manager-rethinks-the-starting-point-for-iam-roles/</link>
		
		<dc:creator><![CDATA[Zach Jiang]]></dc:creator>
		<pubDate>Wed, 12 Aug 2026 22:16:55 +0000</pubDate>
				<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=54922b442c95c2111885461105bb195e</guid>

					<description><![CDATA[When you build a new application or capability on Amazon Web Services (AWS), you want to focus on what you’re building. Getting a service running almost always begins with AWS Identity and Access Management (IAM). Many AWS services that act on your behalf need an IAM role, an identity the service assumes to access your […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Can I do that with policy? Understanding the AWS Service Authorization Reference</title>
		<link>https://noise.getoto.net/2026/04/27/can-i-do-that-with-policy-understanding-the-aws-service-authorization-reference/</link>
		
		<dc:creator><![CDATA[Anshu Bathla]]></dc:creator>
		<pubDate>Mon, 27 Apr 2026 16:01:46 +0000</pubDate>
				<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS IAM policies]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[fine-grained authorization]]></category>
		<category><![CDATA[IAM]]></category>
		<category><![CDATA[IAM policies]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[least privilege]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=ab19e9a974097592c6515d2ddc8dbc86</guid>

					<description><![CDATA[Understanding what AWS Identity and Access Management (IAM) policies can control helps you build better security controls and avoid spending time on approaches that won’t work. You’ve likely encountered questions like: Can I use AWS Organizations service control policies (SCPs) to prevent the creation of security groups that allow traffic from 0.0.0.0/0? Can I block […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Practical steps to minimize key exposure using AWS Security Services</title>
		<link>https://noise.getoto.net/2025/11/21/practical-steps-to-minimize-key-exposure-using-aws-security-services/</link>
		
		<dc:creator><![CDATA[Jennifer Paz]]></dc:creator>
		<pubDate>Fri, 21 Nov 2025 21:07:32 +0000</pubDate>
				<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[IAM]]></category>
		<category><![CDATA[incident response]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=760d7d36bff194f78d6ca70904be227b</guid>

					<description><![CDATA[Exposed long-term credentials continue to be the top entry point used by threat actors in security incidents observed by the AWS Customer Incident Response Team (CIRT). The exposure and subsequent use of long-term credentials or access keys by threat actors poses security risks in cloud environments. Additionally, poor key rotation practices, sharing of access keys […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Simplified developer access to AWS with ‘aws login’</title>
		<link>https://noise.getoto.net/2025/11/20/simplified-developer-access-to-aws-with-aws-login/</link>
		
		<dc:creator><![CDATA[Shreya Jain]]></dc:creator>
		<pubDate>Wed, 19 Nov 2025 22:59:42 +0000</pubDate>
				<category><![CDATA[AWS CLI]]></category>
		<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[AWS Security Token Service]]></category>
		<category><![CDATA[AWS STS]]></category>
		<category><![CDATA[Developer Tools]]></category>
		<category><![CDATA[Foundational (100)]]></category>
		<category><![CDATA[IAM]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=d6abc6089f08836186271913aa34d124</guid>

					<description><![CDATA[Getting credentials for local development with AWS is now simpler and more secure. A new AWS Command Line Interface (AWS CLI) command, aws login, lets you start building immediately after signing up for AWS without creating and managing long-term access keys. You use the same sign-in method you already use for the AWS Management Console. […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Unlock new possibilities: AWS Organizations service control policy now supports full IAM language</title>
		<link>https://noise.getoto.net/2025/09/19/unlock-new-possibilities-aws-organizations-service-control-policy-now-supports-full-iam-language/</link>
		
		<dc:creator><![CDATA[Swara Gandhi]]></dc:creator>
		<pubDate>Fri, 19 Sep 2025 17:50:10 +0000</pubDate>
				<category><![CDATA[announcements]]></category>
		<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[AWS Organizations]]></category>
		<category><![CDATA[policies]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=7cc3502e0d2eb27589875592059f6c18</guid>

					<description><![CDATA[Amazon Web Service (AWS) recently announced that AWS Organizations now offers full AWS Identity and Access Management (IAM) policy language support for service control policies (SCPs). With this feature, you can use conditions, individual resource Amazon Resource Names (ARNs), and the NotAction element with Allow statements. Additionally, you can now use wildcards at the beginning or middle of […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Beyond IAM access keys: Modern authentication approaches for AWS</title>
		<link>https://noise.getoto.net/2025/07/22/beyond-iam-access-keys-modern-authentication-approaches-for-aws/</link>
		
		<dc:creator><![CDATA[Mitch Beaumont]]></dc:creator>
		<pubDate>Mon, 21 Jul 2025 23:13:43 +0000</pubDate>
				<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS Identity and Access Management]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[devops]]></category>
		<category><![CDATA[DevSecOps]]></category>
		<category><![CDATA[IAM]]></category>
		<category><![CDATA[IAM policies]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=e4ee7dfa2608bf03d7bf24667b2d8ec4</guid>

					<description><![CDATA[When it comes to AWS authentication, relying on long-term credentials, such as AWS Identity and Access Management (IAM) access keys, introduces unnecessary risks; including potential credential exposure, unauthorized sharing, or theft. In this post, I present five common use cases where AWS customers traditionally use IAM access keys and present more secure alternatives that you […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Implementing just-in-time privileged access to AWS with Microsoft Entra and AWS IAM Identity Center</title>
		<link>https://noise.getoto.net/2025/06/03/implementing-just-in-time-privileged-access-to-aws-with-microsoft-entra-and-aws-iam-identity-center/</link>
		
		<dc:creator><![CDATA[Rodney Underkoffler]]></dc:creator>
		<pubDate>Tue, 03 Jun 2025 16:45:37 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS IAM Identity Center]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[AWS Management Console]]></category>
		<category><![CDATA[Privileged access]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<category><![CDATA[Temporary elevated access]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=3e263777554f2fcb0090e5dc3f636973</guid>

					<description><![CDATA[Controlling access to your privileged and sensitive resources is critical for all AWS customers. Preventing direct human interaction with services and systems through automation is the primary means of accomplishing this. For those infrequent times when automation is not yet possible or implemented, providing a secure method for temporary elevated access is the next best […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>How to import existing AWS Organizations SCPs and RCPs to CloudFormation</title>
		<link>https://noise.getoto.net/2025/04/23/how-to-import-existing-aws-organizations-scps-and-rcps-to-cloudformation/</link>
		
		<dc:creator><![CDATA[Swara Gandhi]]></dc:creator>
		<pubDate>Wed, 23 Apr 2025 20:02:03 +0000</pubDate>
				<category><![CDATA[AWS CloudFormation]]></category>
		<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[AWS Organizations]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[service control policies]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=b223e547604ba11daf5437a00caad85b</guid>

					<description><![CDATA[Many AWS Organizations customers begin by creating and manually applying service control policies (SCPs) and resource control policies (RCPs) through the AWS Management Console or AWS Command Line Interface (AWS CLI) when they first set up their environments. However, as the organization grows and the number of policies increases, this manual approach can become cumbersome. It can […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Use AWS service reference information to automate policy management workflows</title>
		<link>https://noise.getoto.net/2025/03/24/use-aws-service-reference-information-to-automate-policy-management-workflows/</link>
		
		<dc:creator><![CDATA[Ramesh Rajan]]></dc:creator>
		<pubDate>Mon, 24 Mar 2025 16:03:17 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS IAM Access Analyzer]]></category>
		<category><![CDATA[AWS IAM policies]]></category>
		<category><![CDATA[AWS Identity and Access Management]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[IAM]]></category>
		<category><![CDATA[IAM Access Analyzer]]></category>
		<category><![CDATA[IAM policies]]></category>
		<category><![CDATA[least privilege]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=5b8657de13178c1445a7c667f74b5b75</guid>

					<description><![CDATA[Amazon Web Services (AWS) provides service reference information in JSON format to help you automate policy management workflows. With the service reference information, you can access available actions across AWS services from machine-readable files. The service reference information helps to address a key customer need: keeping up with the ever-growing list of services and actions […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Four ways to grant cross-account access in AWS</title>
		<link>https://noise.getoto.net/2025/02/24/four-ways-to-grant-cross-account-access-in-aws/</link>
		
		<dc:creator><![CDATA[Anshu Bathla]]></dc:creator>
		<pubDate>Mon, 24 Feb 2025 20:01:05 +0000</pubDate>
				<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS IAM policies]]></category>
		<category><![CDATA[AWS Identity and Access Management]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[IAM]]></category>
		<category><![CDATA[IAM policies]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[least privilege]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=d82532a151928554776de736af601f0f</guid>

					<description><![CDATA[As your Amazon Web Services (AWS) environment grows, you might develop a need to grant cross-account access to resources. This could be for various reasons, such as enabling centralized operations across multiple AWS accounts, sharing resources across teams or projects within your organization, or integrating with third-party services. However, granting cross-account access requires careful consideration […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>How to implement IAM policy checks with Visual Studio Code and IAM Access Analyzer</title>
		<link>https://noise.getoto.net/2025/01/14/how-to-implement-iam-policy-checks-with-visual-studio-code-and-iam-access-analyzer/</link>
		
		<dc:creator><![CDATA[Anshu Bathla]]></dc:creator>
		<pubDate>Tue, 14 Jan 2025 17:02:04 +0000</pubDate>
				<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS IAM Access Analyzer]]></category>
		<category><![CDATA[AWS IAM policies]]></category>
		<category><![CDATA[AWS Identity and Access Management]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[IAM]]></category>
		<category><![CDATA[IAM Access Analyzer]]></category>
		<category><![CDATA[IAM policies]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[least privilege]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=e65bb63588f35d018d106aeaff490e5c</guid>

					<description><![CDATA[In a previous blog post, we introduced the IAM Access Analyzer custom policy check feature, which allows you to validate your policies against custom rules. Now we’re taking a step further and bringing these policy checks directly into your development environment with the AWS Toolkit for Visual Studio Code (VS Code). In this blog post, […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Customize the scope of IAM Access Analyzer unused access analysis</title>
		<link>https://noise.getoto.net/2025/01/08/customize-the-scope-of-iam-access-analyzer-unused-access-analysis/</link>
		
		<dc:creator><![CDATA[Stéphanie Mbappe]]></dc:creator>
		<pubDate>Wed, 08 Jan 2025 17:35:14 +0000</pubDate>
				<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS IAM Access Analyzer]]></category>
		<category><![CDATA[AWS IAM policies]]></category>
		<category><![CDATA[AWS Identity and Access Management]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[IAM]]></category>
		<category><![CDATA[IAM Access Analyzer]]></category>
		<category><![CDATA[IAM policies]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[least privilege]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=48e65569ea7a4ab0d9f412e9d81950b1</guid>

					<description><![CDATA[AWS Identity and Access Management Access Analyzer simplifies inspecting unused access to guide you towards least privilege. You can use unused access findings to identify over-permissive access granted to AWS Identity and Access Management (IAM) roles and users in your accounts or organization. From a delegated administrator account for IAM Access Analyzer, you can use the dashboard […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Secure root user access for member accounts in AWS Organizations</title>
		<link>https://noise.getoto.net/2024/11/22/secure-root-user-access-for-member-accounts-in-aws-organizations/</link>
		
		<dc:creator><![CDATA[Jonathan VanKim]]></dc:creator>
		<pubDate>Fri, 22 Nov 2024 14:17:18 +0000</pubDate>
				<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[AWS Organizations]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=6ae45d8b78b7a3888b7512655f1a5bdd</guid>

					<description><![CDATA[AWS Identity and Access Management (IAM) now supports centralized management of root access for member accounts in AWS Organizations. With this capability, you can remove unnecessary root user credentials for your member accounts and automate some routine tasks that previously required root user credentials, such as restoring access to Amazon Simple Storage Service (Amazon S3) […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Secure by Design: AWS enhances centralized security controls as MFA requirements expand</title>
		<link>https://noise.getoto.net/2024/11/15/secure-by-design-aws-enhances-centralized-security-controls-as-mfa-requirements-expand/</link>
		
		<dc:creator><![CDATA[Arynn Crow]]></dc:creator>
		<pubDate>Fri, 15 Nov 2024 17:58:22 +0000</pubDate>
				<category><![CDATA[announcements]]></category>
		<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[Foundational (100)]]></category>
		<category><![CDATA[MFA]]></category>
		<category><![CDATA[multi-factor authentication]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=9b4ed09f801f4b0dc185f38e7b80fa1b</guid>

					<description><![CDATA[At Amazon Web Services (AWS), we’ve built our services with secure by design principles from day one, including features that set a high bar for our customers’ default security posture. Strong authentication is a foundational component in overall account security, and the use of multi-factor authentication (MFA) is one of the simplest and most effective […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Refine unused access using IAM Access Analyzer recommendations</title>
		<link>https://noise.getoto.net/2024/09/18/refine-unused-access-using-iam-access-analyzer-recommendations/</link>
		
		<dc:creator><![CDATA[Stéphanie Mbappe]]></dc:creator>
		<pubDate>Wed, 18 Sep 2024 19:09:34 +0000</pubDate>
				<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS IAM Access Analyzer]]></category>
		<category><![CDATA[AWS IAM policies]]></category>
		<category><![CDATA[AWS Identity and Access Management]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[IAM Access Analyzer]]></category>
		<category><![CDATA[IAM policies]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[least privilege]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=4648a7ca3a0b47cddf98049ce4b7af27</guid>

					<description><![CDATA[As a security team lead, your goal is to manage security for your organization at scale and ensure that your team follows AWS Identity and Access Management (IAM) security best practices, such as the principle of least privilege. As your developers build on AWS, you need visibility across your organization to make sure that teams […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Using Amazon Detective for IAM investigations</title>
		<link>https://noise.getoto.net/2024/09/18/using-amazon-detective-for-iam-investigations/</link>
		
		<dc:creator><![CDATA[Ahmed Adekunle]]></dc:creator>
		<pubDate>Wed, 18 Sep 2024 16:06:31 +0000</pubDate>
				<category><![CDATA[Amazon Detective]]></category>
		<category><![CDATA[Amazon GuardDuty]]></category>
		<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[IAM]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=21b03bd06fb8b1a132dc112dcf88c81e</guid>

					<description><![CDATA[Uncovering  AWS Identity and Access Management (IAM) users and roles potentially involved in a security event can be a complex task, requiring security analysts to gather and analyze data from various sources, and determine the full scope of affected resources. Amazon Detective includes Detective Investigation, a feature that you can use to investigate IAM users […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Strategies for achieving least privilege at scale – Part 2</title>
		<link>https://noise.getoto.net/2024/07/09/strategies-for-achieving-least-privilege-at-scale-part-2/</link>
		
		<dc:creator><![CDATA[Joshua Du Lac]]></dc:creator>
		<pubDate>Tue, 09 Jul 2024 18:13:54 +0000</pubDate>
				<category><![CDATA[AWS IAM]]></category>
		<category><![CDATA[AWS IAM Access Analyzer]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[AWS Organizations]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Management & Governance]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=cd72197db67e3a1b749dd5801e030fbc</guid>

					<description><![CDATA[In this post, we continue with our recommendations for achieving least privilege at scale with AWS Identity and Access Management (IAM). In Part 1 of this two-part series, we described the first five of nine strategies for implementing least privilege in IAM at scale. We also looked at a few mental models that can assist […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
	</channel>
</rss>

<!--
Performance optimized by W3 Total Cache. Learn more: https://www.boldgrid.com/w3-total-cache/?utm_source=w3tc&utm_medium=footer_comment&utm_campaign=free_plugin

Object Caching 18/218 objects using Memcached
Page Caching using Disk: Enhanced 
Lazy Loading (feed)
Database Caching using Memcached

Served from: noise.getoto.net @ 2026-10-27 09:46:21 by W3 Total Cache
-->