unicrons.cloud

New post! 📰 WriteUp: Cloud Security Championship #1

unicrons.cloud/en/2025/07/0...

Probably you don't know how we look like so this is us

We're at @fwdcloudsec.org and we have stickers. I do not know what else to say so just find us (or the stickers we left around 😂)

Pensabais que nos habíamos olvidado de la serie de IAM? Bueno, pues es correcto. Perdón por el retraso, pero aquí estamos de nuevo.

Hoy como estrella invitada: SNS ⭐️

unicrons.cloud/es/2025/02/2...

Did you think we had forgotten about the IAM series? Well, you were right. Sorry for the delay, but here we are again.

Today SNS as starring guest. ⭐️

unicrons.cloud/en/2025/02/2...

Do you agree with this chatGPT definition of "misconfiguration" in a cloud security context?

How would you define it?

Awseye - See Inside AWS Accounts Awseye tracks publicly accessible AWS data to help identify and secure known and exposed AWS resources. Empowering defenders with open-source intelligence.

The self described “Shodan of AWS” is now live! This is an amazing project from Daniel Grzelak that helps democratize cloud resource enumeration for the masses. Very excited about this!
awseye.com

In one hour we will be talking about Cloud Security in #AWSCommunityDaySpain 😬

PD: we have stickers... 🦄

On our way to #AWSCommunityDaySpain 🚆 to talk about how to build your own CSPM with @steampipeio, AWS SecurityHub and AWS Organizations.

Do you have a tool that needs permissions across all your AWS accounts? Do you want to manage it using IaC? Check out our latest post! https://unicrons.cloud/en/2024/10/14/deploy-iam-roles-across-an-aws-organization-as-code/

Here we go! @fwdcloudsec

You know us, if we see a scoreboard, there we go. And last weekend, we weren't at #defcon32, but we didn't miss the opportunity to participate in the @cloudvillage_dc CTF😬

Here we you have the 5 challenges we were able to solve:
https://unicrons.cloud/en/2024/08/13/writeup-cloud-village-ctf-2024/

Y aquí tenéis el enlace del feed en español: https://unicrons.cloud/es/feed.xml

We have just enabled the RSS feed on our blog. You can subscribe here: https://unicrons.cloud/en/feed.xml

Because if you add an ARN as `Principal`, it must exists and will generate a unique ID. You can find more information in the following AWS docs, either way if someone can recreate your roles without your authorization, you have a bigger issue.
docs.aws.amazon.com/IAM/latest/U...

Extra bit we didn't include in the post: The source roles are included under the `aws:PrincipalArn` condition to avoid losing access if we recreate the roles. Why don't add them as `Principal`?

También puedes leerlo en Español aquí:
unicrons.cloud/es/2024/06/0...

It's been a while but the new episode of our IAM series is out! Let's talk about S3:
https://unicrons.cloud/en/2024/06/01/iam-policy-mishaps-case-1---s3/

También puedes leerlo en Español aquí
unicrons.cloud/es/2024/02/2...

We just launched unicrons.cloud. Check out our first blog post! IAM intro from our Sh3llCON talk, first episode of the series. unicrons.cloud/en/2024/02/2...