Field notes
Practitioner-led writing on cloud security, SecOps and DevSecOps, drawn from infrastructure we run, not slideware.
- Non-Human Identities SecOps Cloud Security Identity
From Secrets to Service Accounts: SecOps Lessons in Non-Human Identity Hygiene
Non-human identities now vastly outnumber humans in the cloud, yet they are rarely monitored or decommissioned. The first post in a SecOps series on why machine identities are the elephant in the room and how to start getting them under control.
Liran Aknin 4 min read Read post - AWS ECR Lambda Terraform
How I Set Up Cross-Account ECR Access for Lambda Functions
A Terraform pattern for giving Lambda functions across multiple AWS accounts and regions access to container images in a central ECR repository, using cross-account repository policies and cross-region replication.
Liran Aknin 6 min read Read post - AWS OIDC GitHub Actions CI/CD
Farewell Static Access Keys
How to replace long-lived CI/CD credentials with short-lived OpenID Connect (OIDC) tokens, walking through a GitHub Actions to AWS setup in Terraform that drops static secrets entirely.
Liran Aknin 9 min read Read post