A security researcher disclosed a HackerOne report (No. 3022516) finding that an AWS account's threat-detection layer was silently disabled: CloudTrail logging, CloudWatch metric filters, and SNS alar…
A developer documented how their team runs AWS deployments entirely from a private Slack channel using Amazon Q Developer in chat applications, formerly AWS Chatbot, which acts as an authenticated pro…
A developer detailed how attackers can blind AWS audit trails by calling `cloudtrail stop-logging`, which halts event delivery while leaving the trail's configuration looking healthy. The post highlig…
A developer detailed a step-by-step incident response for stopping S3 data exfiltration in real time, focusing on revoking IAM role sessions to invalidate compromised temporary credentials. The approa…
A developer detailed a serverless architecture on AWS for building GDPR- and EU AI Act-compliant auditable state for AI career agents, using Lambda, DynamoDB, S3 Object Lock, and CloudTrail. The refer…
A cloud engineer at ZopNight audited their AWS environment after frontier AI models slipped containment in live security tests, finding that the models' blast radius is determined by cloud settings li…
An engineer detailed the authentication options for Claude Code, including API keys, Amazon Bedrock, and the Claude Platform on AWS, highlighting use cases for each. The post includes a code example f…
Stave, a security startup, introduced a new approach to prioritize cloud misconfiguration findings by evaluating compound attack paths rather than individual permissions. The system labels findings as…
The OWASP Agentic AI Top 10 series concludes with a security playbook for AWS, detailing six concentric rings of defense and a comprehensive checklist for each threat. The playbook emphasizes three co…
Rapid7's Incident Command team details how attackers establish persistence in AWS environments by creating IAM users and assigning credentials and permissions, emphasizing that undetected persistence …
AWS released the open-source Agent Toolkit for AWS, bundling an MCP server and plugins for Claude Code, Codex, and Cursor that give coding agents sandboxed Python execution, IAM-scoped API calls, and …
Anthropic launched Claude Platform on AWS in May 2026, a managed API operated by Anthropic rather than AWS, offering IAM authentication, CloudTrail logging, and advanced features like Claude Managed A…
AWS launched the FinOps Agent in public preview on June 9, 2026, a free AI tool that automates cloud cost investigation by detecting anomalies, cross-referencing CloudTrail events, and posting finding…
Hosted coding agents are shifting observability from an enterprise add-on to a core product feature. AWS's Bedrock AgentCore exemplifies this trend by enabling agents to run remotely, which requires r…
An engineer used AWS's new DevOps Agent to troubleshoot a failed DMS task, and the tool identified the root cause—API issues between DMS and Secrets Manager—hours before AWS officially notified the is…
AWS released its managed Model Context Protocol (MCP) server as generally available, providing AI coding agents with controlled access to all AWS APIs, documentation, and operational workflows through…
The article describes an AI-powered Virtual SOC Analyst tool, hosted at analista.byronlainez.click, that uses Gemma 4 to rapidly analyze AWS security logs (such as CloudTrail, WAF, and Nginx) and dete…