TrustOnCloud provide cloud control catalogs for each Cloud service; based on threat models, audit-ready, and always up-to-date.
Joined January 2021
- Tweets226
- Following41
- Followers244
- Likes110
Our #ThreatModel covers the whole service on purpose. The filter makes it yours.
Pick the feature classes your workload uses and threats, controls, actions and the compliance mapping narrow together. Then sort by priority and export.
Try it now: demo.app.trustoncloud.com/th…
#TrustOnCloud #CloudGovernance #CloudControls #AWS
Bryce Johnson and Carlos Mora spent time at @fwdcloudsec London on what this community does best: open conversations about cloud security. Threat research, security strategy, keeping strong CloudSec teams.
fwdcloudsec.org/conference/e…
A PCI DSS requirement tells you what must be achieved. It does not tell your engineering team what to implement for each cloud service.
The TrustOnCloud Compliance Map translates PCI DSS 4.0.1 into actionable, testable and service-specific controls.
Explore it in our demo app:
demo.app.trustoncloud.com/co…
Mappings: Secure Controls Framework.
#CloudSecurity #PCIDSS #CloudCompliance #Cloud
Four DynamoDB IAM condition keys for Global Secondary Indexes failed silently. Policies looked correct. Item-level access was not restricted. We disclosed it to AWS, they rated it high severity, and it is now fixed. Here is what happened.
Timeline: reported to AWS VDP on Feb 20, 2026. Accepted Feb 23. Fix deployed May 12. We verified resolution May 15. The docs are corrected. Research by Usman Nawaz.
If you used these keys between Nov 2025 and May 2026: audit CloudTrail for dynamodb:Query calls against affected GSIs, and dynamodb:PutItem against tables, for access outside the expected partition key scope. Full write-up: trustoncloud.com/when-iam-co…
Today we are open-sourcing @sigma_hq rule packages for AWS S3 and GCP BigQuery.
We have taken the detective controls from our threat models, the ones that already say exactly what to look for in the logs, and expressed them as Sigma rules so customers can deploy them without rewriting the logic by hand.
This release covers 15 AWS S3 controls and 4 GCP BigQuery controls, all built on the native cloud log source (CloudTrail for AWS, Cloud Logging for GCP).
Learn more: trustoncloud.com/blog/open-s…
#sigma #aws #gcp #controls #cloudsec #trustoncloud
𝗣𝗿𝗼𝗱𝘂𝗰𝘁 𝘂𝗽𝗱𝗮𝘁𝗲: Data flow diagrams are now interactive. Across 𝗲𝘃𝗲𝗿𝘆 cloud service we cover.
Here’s what’s new:
→ 𝗛𝗼𝘃𝗲𝗿 any component to surface its threats
→ 𝗣𝗶𝗻 the popup to keep it visible while you explore
→ 𝗖𝗹𝗶𝗰𝗸 through to the full threat detail
For our customers, log in and try it across every service you’re covered for.
Try it with the Amazon S3 model: demo.app.trustoncloud.com/da….
#ProductUpdate #DataFlowDiagrams #CloudSecurity #AWS #S3
CloudTrail is where your regulators, your SIEM, and your auditors all look. So when a service starts quietly writing customer details into it, that's a problem.
🤖 Made with AI
Two things worth doing this week:
1️⃣Review where CloudTrail logs are stored and who can read them
2️⃣Spot-check what the services handling your most sensitive data are actually writing to the event record
Kudos to Usman at @TrustOnCloud for flagging this and helping AWS ship the fix, and to @Hacker0x01 for a structured disclosure path that actually moves.
#CloudSecurity #AWS #CloudTrail #TrustOnCloud #CloudService