Tagged aws

Profile IAM users, roles and IPs with Amazon Detective graphs to trace lateral movement

Run Pacu against AWS to enumerate IAM, find escalation paths and test lateral movement

Fix exposed S3 buckets with Block Public Access, policy audits and AWS Config rules

Protect API Gateway endpoints with AWS WAF managed rules and rate limits

Enforce least-privilege AWS IAM with scoped policies and permission boundaries

Write least-privilege Lambda execution roles with boundaries and Access Analyzer

Build serverless AWS apps with Lambda, API Gateway, DynamoDB and SAM

Work across AWS, Azure, GCP, Kubernetes and Terraform for CI/CD and monitoring

Manage CI/CD secrets with Vault, AWS Secrets Manager and other secret stores

Design serverless AWS architectures with CloudFormation and cost controls

Set up secrets management with Vault, AWS, Azure and GCP secret stores

Turn Slack access requests into least-privilege GitHub and AWS IAM grants with checks

Check AWS resources against your compliance policy daily and draft reviewed fixes

Flag AWS spend that breaks from its per-service baseline and alert with likely drivers

Work with AWS services like EC2, S3, Lambda and IAM through the AWS CLI

Log into AWS, Google Cloud or Azure CLIs with device-code login and run them as you

Deploy the QM package to Fly.io or AWS from an organization deployment repo

Log CLIs like gh, gcloud and aws sso in through browser flows and save credentials

Design AWS, Azure and GCP architectures with migration plans and recovery strategies

Store Django static and media files on AWS S3 with django-storages and presigned URLs

Build reusable Terraform modules and manage state across AWS, Azure and GCP

Find your AWS profile, region and account before any SageMaker or AWS task

Set up an isolated Python environment with current boto3 for SageMaker and AWS work

Plan and coordinate deploying a model to Amazon SageMaker endpoints

Point AWS DSQL questions to the current distributed SQL guidance

Test AWS, Azure and GCP for credential theft and IAM privilege escalation paths

Browse the 35 infrastructure abstractions for Webiny AWS deployments

Customize Webiny AWS infrastructure with Pulumi handlers, domains and VPCs

Deploy Temporal workers on AWS Lambda with the Worker Controller Instance

Get AWS architecture, security and service selection advice backed by docs

Enumerate AWS IAM policies and map 21 known privilege escalation primitives

Abuse iam:PassRole and AssumeRole chains to reach higher-privilege AWS roles

Map cloud IAM attack paths across AWS, Azure and GCP after credential discovery

Guide authorized AWS pentests covering IAM, S3, metadata SSRF and Lambda

Pentest Azure, AWS, GCP and O365 for misconfigurations and exposed secrets

Deploy a finished app to your own AWS account and get a public HTTPS link

Publish HTML or markdown artifacts to a public URL on your own AWS account

Launch, reach and tear down AWS Lambda MicroVM remote workers for coding tasks

Choose an AWS runtime for an AI agent and plan a proof of concept

Deploy an AgentCore agent to AWS with preflight checks, rollbacks and canaries

Build generative AI apps on Amazon Bedrock with Knowledge Bases and Agents

Build custom AMIs and container images with EC2 Image Builder pipelines

Get AWS architecture advice tailored to startup stage, team size and runway

Author and deploy Airflow DAGs and Serverless workflow files on AWS MWAA

Select, fine-tune and deploy ML models on Amazon SageMaker

Build and deploy full-stack apps with Amplify Gen2 auth, data and storage

Add Amazon Cognito sign-up, sign-in, MFA and OAuth to web and mobile apps

Analyze AWS spend, find savings, set budgets and right-size resources

Build full-stack apps with AWS Blocks and deploy them from code