Dave Kerber

Fantastic AWS Policies and Where to Find Them - Tools for AWS IAM There are more than you think, and now it's easy to find them.

I did a writeup of all the different policy types in AWS: iam.cloudcopilot.io/posts/fantas...

And made a tool to download (almost) all of them: github.com/cloud-copilo...

GitHub - cloud-copilot/iam-lens: TODO: Funny pun about visibility TODO: Funny pun about visibility. Contribute to cloud-copilot/iam-lens development by creating an account on GitHub.

github.com/cloud-copilo... hit 200 stars today!

This week I was humbled to get to present on github.com/cloud-copilo... at @fwdcloudsec.org. It's an amazing conference full of wonderful people.

www.youtube.com/watch?v=j0YT...

Excited to see everyone at @nebraskajs.dev tonight and talk about github.com/cloud-copilo...

OMG that so good

IAM printing this out for my wife. She won’t get the joke but still worth it.

I wonder if a browser extension specifically for the AWS solution could be useful. It could automatically change colors and icons based on account.

I think that’s a pretty common pattern. You already have a problem solved when a new solution comes out. Without a significant improvement, there is little reason to change.

Introducing Policy Tester, a test harness for AWS IAM Policies - Tools for AWS IAM Deploying a policy to test it so 2024

Here is the blog post announcing it: iam.cloudcopilot.io/posts/introd...

Silly me thought it would be easy to build a simulator of AWS IAM in Typescript. Anyway, I did and you can use it in your browser: iam.cloudcopilot.io/tools/policy...

Ok, I have to say. I don't get OPA, why are we scanning terraform plans with OPA?