Pinned Tweet
IAM is hard 😭 – so we wrote a song about it!
Enjoy k9 Security’s new IAM song 🎸😈:
🎵 Keys to the Cloud 🎵
youtu.be/xuPzFcZyAjk
DSPM is hot and here are the five most common capabilities offered by market leaders:
1. Data Discovery & Classification
2. Risk Assessment
3. Data Access Governance
4. Incident Response & Remediation
5. Compliance
Which capability could your org use most?
Introducing cedar-py! 🎉
cedarpy helps you use the Cedar Policy library from Python. You can use cedarpy to:
-check whether a request is authorized
-format policies
Project currently passing >69 of the 82 official cedar-integration-tests.
GitHub repo: buff.ly/3Dat80q
See the README for details on using the library and development.
cedarpy builds are available on PyPi for:
1. Linux: x86_64, aarch64
2. Mac: x86_64, aarch64
3. Windows: x86_64
Thank you to the Cedar team for building a great engine and open sourcing it!
And thank you to @Geoff_Baskwill for your contributions: format_policies and help modeling & implementing authorization results!
Feedback and contributions welcome via GitHub issues 🙂
CIEM touches many roles, functions, and products
Identity management capabilities are being added to products to meet the increasing demand for managing access entitlements
Reach out to learn more about the adoption of CIEM in your category and how to accelerate your roadmap!
Wondering how to scale CIEM in your org?
See how your cloud team can implement entitlement management with a cloud access management toolkit (CAMT).
Use the toolkit to integrate security into everyone's job!
👉 buff.ly/3FGPSqJ
#SilolessSecurity
Experience scalable CIEM in your org with k9's free Starter Plan!
Operationalize IAM access review & protect data by enabling everyone in your org to easily make better security decisions
Security should be everyone’s job. Now it can be.
👉 buff.ly/3ltuFt6
#aws
Streamline how your organization finds and fixes excess AWS IAM permissions with k9’s Datadog integration!
Now you can visualize who has access to data and APIs alongside other operational data in the dashboard tools your engineers currently use!
Wondering which IAM principals can share resources across AWS accounts with Resource Access Manager APIs?
k9 Security now analyzes principals’ access and reports whether IAM principals may administer or read AWS RAM sharing configurations!
👉 buff.ly/40jyqkO
Do you find it difficult to understand what access people have in AWS Identity Center? 😠
Not to worry! Our new Identity Center worksheet bridges the user and group entities to the IAM roles they give access to!
Increase visibility => manage risk
👉buff.ly/3Bdk6PK
The wait is over... You can now configure multiple MFA devices for your AWS IAM users and account ROOT user! 🎉
See how to set up your second MFA device in just five minutes with this video walkthrough: 👉 buff.ly/3ACimza
Wondering which IAM principals can administer or use ECR APIs and resources?
k9 Security now analyzes principals’ access to the Amazon Elastic Container Registry (ECR) APIs and gives you a short list to review! Ask us your IAM questions!
👉 buff.ly/3V2MZpp
#IAM #k9 #AWS
🎉 Now you can verify your policies do what you think they do whenever you want by triggering an IAM permissions analysis on demand! 🎉
see details here 👉
buff.ly/3DSknJQ
k9 Security can't wait to see all of you at AWS re:Invent 2022 in Las Vegas! We have compiled a list of the top 6 #security and #DevSecOps talks that we are looking forward to attending. Which talks are on your short list?"
more details 👉 buff.ly/3S0Tg2T
#AWS #reInvent
Who can manage your systems in AWS and change configurations?
A 👻 ? (we hope not)
Now you can know for sure!
Review IAM principals' access to your control plane and sensitive configurations with k9's access analysis of the AWS Systems Manager APIs
👉 buff.ly/3V4883b
You don’t need more experts to effectively scale AWS IAM security, we promise!
We recently recorded our approach to simplifying security and embedding it in your organization.
Watch it here 👉 buff.ly/3AYR19T
#cloudsecurity #aws #iam
We are 1 week away from #AWS #reInforce 2022.
We have compiled our list of the top 5 #IAM talks we are looking forward to attending!
Which talks are you excited to see?
👀 more info at: k9security.io/events/aws-rei…
#aws #reInforce

ALT IAM going to AWS re:Inforce, are you? Top 5 IAM sessions: 1. AWS Identity and Access Management deep dive (IAM301) 2. Developing preventive controls with AWS identity services (IAM332) 3. Applying attribute-based access control using AWS IAM (IAM375) 4. AWS IAM policy evaluation in action (IAM473) 5. Building a data perimeter to allow access to authorized users (IAM371)
Review access your AWS IAM principals and data resources have on the command line with k9 CLI v0.2.0! Now IAM is in your terminal 🖥️
Query and filter:
• principals
• principal access summaries
• resources
• resource access summaries
github.com/k9securityio/k9-c…
Get notified about important changes in your IAM configuration by enabling k9 Security's official integration with AWS Security Hub. 📢
aws.amazon.com/about-aws/wha…











