Fraser Scott
Fraser Scott
Github pages is an interesting idea. I've used it for a number of static sites, but haven't used jekyll yet. That would probably be pretty suitable for a blog.
Both of those look cool. I guess anything that involves not having to run a server is good, to keep things simple. Do they work with Github pages?
Looks good. Certainly makes sense for getting up and running without having to run infrastructure but still having tons of control.
Done: https://github.com/owasp-cloud-security/owasp-cloud-security-blog
Took a look at Threat Dragon again, it would be really easy to write a script that parses the saved JSON file and either adds threats based on the name...
I would say the threat in this case applies to IAM, but the mitigation is via CloudTrail and you'd still have to monitor those specific event types.
Related to https://github.com/owasp-cloud-security/owasp-cloud-security/blob/master/aws/iam/aws_iam_threats.yaml#L66 but this is a different threat.
See https://github.com/owasp-cloud-security/owasp-cloud-security/pull/111
Dropped an email to [email protected]