Our new open source Terraform project offers hands-on experience with VPC endpoints and demos AWS's new condition keys for securing EC2 instances The post Terraform Lab: Taking the New VPC Endpoint Condition Keys Out for a Spin appeared first on Ermetic ... Read More

Your K8s workloads legitimately need access to sensitive cloud resources – federated identities let you grant it easily and securely The post Federating Kubernetes Workloads with Cloud Identities appeared first on Ermetic ... Read More

If you haven’t been using VPC endpoints until now, AWS's two new condition keys should make you consider doing so The post A New Incentive for Using AWS VPC Endpoints appeared first on Ermetic ... Read More

Read this review of IMDS, an important AWS EC2 service component, to understand its two versions and improve your AWS security The post AWS EC2 IMDS – What You Need to Know appeared first on Ermetic ... Read More

If you’re not familiar enough with the SKU attribute of the Azure public IP address you may think you’re configuring virtual machines as public but aren’t. The post A Caveat for Azure VM Public IP Configuration appeared first on Ermetic ... Read More

Lior Zatlavi explains how to set up the platform in your environment and get maximum value The post How to Minimize Unintended Access and Achieve Least Privilege with Ermetic and AWS appeared first on Ermetic ... Read More

AWS are changing an aspect of how trust policy is evaluated when it comes to assuming roles - here is a quick digest of what this change may mean to you The post IAM Role Trust Update – What You Need to Know appeared first on Ermetic ... Read More

For some types of Microsoft Azure resources and subnets, it’s extremely easy to configure what is essentially public network access. We describe here some examples and how to reduce such risks. The post Public Network Access to Azure Resources Is Too Easy to Configure appeared first on Ermetic ... Read More

Upon hearing of a cyber security incident, alleged or factual, the most productive thing to do is learn what you can from its main lessons The post Five Lessons Every Cybersecurity Team Can Learn from the Uber Incident appeared first on Ermetic ... Read More

IAM Roles Anywhere may be a pivotal moment for security; it lets you enrich the arsenal of tools at your disposal for improving your AWS security posture. The post Why It’s Important to Take Notice of AWS IAM Roles Anywhere  appeared first on Ermetic ... Read More