least privilege – Noise https://noise.getoto.net The collective thoughts of the interwebz Mon, 24 Mar 2025 16:03:17 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.2 Use AWS service reference information to automate policy management workflows https://noise.getoto.net/2025/03/24/use-aws-service-reference-information-to-automate-policy-management-workflows/ Mon, 24 Mar 2025 16:03:17 +0000 http://noise.getoto.net/?guid=5b8657de13178c1445a7c667f74b5b75 Four ways to grant cross-account access in AWS https://noise.getoto.net/2025/02/24/four-ways-to-grant-cross-account-access-in-aws/ Mon, 24 Feb 2025 20:01:05 +0000 http://noise.getoto.net/?guid=d82532a151928554776de736af601f0f How to implement IAM policy checks with Visual Studio Code and IAM Access Analyzer https://noise.getoto.net/2025/01/14/how-to-implement-iam-policy-checks-with-visual-studio-code-and-iam-access-analyzer/ Tue, 14 Jan 2025 17:02:04 +0000 http://noise.getoto.net/?guid=e65bb63588f35d018d106aeaff490e5c Customize the scope of IAM Access Analyzer unused access analysis https://noise.getoto.net/2025/01/08/customize-the-scope-of-iam-access-analyzer-unused-access-analysis/ Wed, 08 Jan 2025 17:35:14 +0000 http://noise.getoto.net/?guid=48e65569ea7a4ab0d9f412e9d81950b1 Refine unused access using IAM Access Analyzer recommendations https://noise.getoto.net/2024/09/18/refine-unused-access-using-iam-access-analyzer-recommendations/ Wed, 18 Sep 2024 19:09:34 +0000 http://noise.getoto.net/?guid=4648a7ca3a0b47cddf98049ce4b7af27 Refine permissions for externally accessible roles using IAM Access Analyzer and IAM action last accessed https://noise.getoto.net/2023/11/01/refine-permissions-for-externally-accessible-roles-using-iam-access-analyzer-and-iam-action-last-accessed/ Wed, 01 Nov 2023 18:51:27 +0000 http://noise.getoto.net/?guid=4185671b8c05efc692a62d9e54459559 Two real-life examples of why limiting permissions works: Lessons from AWS CIRT https://noise.getoto.net/2023/08/31/two-real-life-examples-of-why-limiting-permissions-works-lessons-from-aws-cirt/ Thu, 31 Aug 2023 14:03:48 +0000 http://noise.getoto.net/?guid=58e6de58c53330a6eb11161a8161ed7a Use IAM Access Analyzer policy generation to grant fine-grained permissions for your AWS CloudFormation service roles https://noise.getoto.net/2022/10/07/use-iam-access-analyzer-policy-generation-to-grant-fine-grained-permissions-for-your-aws-cloudformation-service-roles/ Fri, 07 Oct 2022 19:19:32 +0000 http://noise.getoto.net/?guid=66af7307dc311d91b394cfd379abf6fe IAM Access Analyzer makes it simpler to author and validate role trust policies https://noise.getoto.net/2022/10/04/iam-access-analyzer-makes-it-simpler-to-author-and-validate-role-trust-policies/ Mon, 03 Oct 2022 22:43:21 +0000 http://noise.getoto.net/?guid=56e945541f595b15cdb506d6651b96e5 Use IAM Access Analyzer to generate IAM policies based on access activity found in your organization trail https://noise.getoto.net/2021/08/26/use-iam-access-analyzer-to-generate-iam-policies-based-on-access-activity-found-in-your-organization-trail/ Thu, 26 Aug 2021 20:33:49 +0000 http://noise.getoto.net/?guid=2cdfd0f94867b7aa06ac9e9ec198b00d Techniques for writing least privilege IAM policies https://noise.getoto.net/2020/12/02/techniques-for-writing-least-privilege-iam-policies/ Wed, 02 Dec 2020 18:01:31 +0000 http://noise.getoto.net/?guid=bbc6ca1ca98e2a6f1ff59ce7f228443e New! Streamline existing IAM Access Analyzer findings using archive rules https://noise.getoto.net/2020/10/28/new-streamline-existing-iam-access-analyzer-findings-using-archive-rules/ Wed, 28 Oct 2020 18:13:32 +0000 http://noise.getoto.net/?guid=6c57cc8004d5ce04fc93d03d69005019 How to get read-only visibility into the AWS Control Tower console https://noise.getoto.net/2020/10/01/how-to-get-read-only-visibility-into-the-aws-control-tower-console/ Thu, 01 Oct 2020 19:30:38 +0000 http://noise.getoto.net/?guid=26250f99ed03b7bf85da18b2556f6110