GUIDES
Notes on AWS posture tooling.
These are the problems people actually Google. Each page tells you how to fix it yourself first. PostureRadar is one option if you would rather not.
How to find public S3 buckets
ACLs vs bucket policies vs Block Public Access. The CLI to find a public bucket, and how to lock it down without taking a website down.
Stale IAM access keys
Keys older than 90 days: credential report, rotate without breaking CI, and stop creating long-lived keys.
Why AWS Config gets expensive
Config charges per recorded change and per rule evaluation. Security Hub turns both on. What to disable, and when you can skip Config entirely.
AWS Security Hub is noisy
Hundreds of controls, many of them irrelevant. AWS now publishes a list of controls to turn off. When Hub is still the right tool.
Email yourself a Prowler report
The CLI, a cron/EventBridge schedule, and SES. And when babysitting that pipeline costs more than paying someone to run it.