Update: In April 2022, AWS released aws:ResourceOrgID (and a couple of other related
condition keys). This blog post does a great job of describing
how it works. I'll leave the rest of this blog post in place for historical
interest, but it's now outdated.
I was thinking about AWS access key IDs yesterday. Specifically, the one that's
often in the AWS_ACCESS_KEY_ID environment variable, or aws_access_key_id
in ~/.aws/credentials. I was trawling through CloudTrail and the repetitive
nature of them caught my eye.
It's yet another blog. I'm not going to post super often. My Twitter feed is probably more interesting - for a very generous definition of interesting.
Security September: Cataclysms in the Cloud Formations was a guest post on Ian Mckay's blog.
Security September: Escaping CodeBuild - The compromise that wasn't was a guest post on Ian Mckay's blog.