grumpy_platform_engineer @GrumpyPlatform

Building IT infra for 20+ years. ❤️‍🔥 for cloud foundations infra: security, networking, governance, scalability, ops, automation. Naturally born red teamer. Straight outta us-east-1 Joined October 2022

Tweets

312
Followers

36
Following

248
Likes

737

Nick Frichette @Frichette_n

3 years ago

Incredible news! hackingthe.cloud has hit 1,000 stars on GitHub! I really appreciate the community support and all of the amazing contributors!

4 42 154 13K 40

Nick Frichette @Frichette_n

3 years ago

A few weeks ago I wrote how vulns in cloud service providers were going to be more and more common as the industry matures. This week’s @CloudSecList seems to exemplify that with several entries involving all 3 major providers.

2 3 28 4K 2

Patrick Debois @patrickdebois

3 years ago

mv 2022/todo.txt 2023/todo.txt

11 28 175 17K 0

Scott Piper @0xdabbad00

3 years ago

Console only. No SDK support. :(

What's New on AWS (Unofficial) @awswhatsnew

3 years ago

Console only. No SDK support. :(

0 3 18 11K 1

3 3 20 6K 0

Vlad Ionescu (he/him) @iamvlaaaaaaad

3 years ago

After watching 289 talks, I can now confidently share my re:Invent 2022 recap 🕵️‍♂️ Verdict: I am whelmed. Not underwhelmed or overwhelmed, just whelmed. Since there were a bunch of other "unboxing" recaps already, here's a thread with an ✨actionable✨ recap.

6 33 121 0 69

🔥 Kareem Carr PhD 🔥 @kareem_carr

3 years ago

I’ve been playing with GPT-3 for months now so let me save you a bit of time. It’s a bullshitter. I mean this in the technical philosophical sense. It produces words that are precisely engineered to sound convincing with zero guarantees that they’re related to reality.

62 126 1K 0 113

Nick Frichette @Frichette_n

3 years ago

I wrote a short post on finding/abusing exposed EBS snapshots. Somewhat unique to these is that you can enumerate all public ones via the API. It's important to have capabilities to detect/respond when resources are exposed in your cloud environments. hackingthe.cloud/aws/enumeratio…

1 11 28 0 7

Mike Julian @mike_julian

3 years ago

I've been neck-deep in AWS billing data all day and all the technical debt AWS has here is somewhat amusing. And, also, I feel for them so hard. Some things that stand out 🧵

5 23 161 0 92

Rafal Wilinski @rafalwilinski

3 years ago

Step Functions Distributed Maps are awesome 💫 Combined with DynamoDB Parallel scans, they enable blazingly fast, whole-table data migrations and transformations. Here's a CDK-based PoC of a migrations framework I have in mind and will be working on 👇 github.com/dynobase/dynam…

2 28 172 0 40

Download Image

Nick Frichette @Frichette_n

3 years ago

This sounds really interesting. I'm curious how it authenticates back to the AWS mothership? If it's the same auth scheme as SSM, an adversary could potentially kill it/send uninteresting responses.

AWS Security @AWSSecurityInfo

3 years ago

This sounds really interesting. I'm curious how it authenticates back to the AWS mothership? If it's the same auth scheme as SSM, an adversary could potentially kill it/send uninteresting responses.

2 43 122 0 10

Download Image

0 1 13 0 2

Aidan W Steele @__steele

3 years ago

*activates the @fwdcloudsec bat signal*

What's New on AWS (Unofficial) @awswhatsnew

3 years ago

*activates the @fwdcloudsec bat signal*

0 15 66 0 2

1 1 12 0 1

Yehuda Cohen @FunWithTheCloud

3 years ago

EFS team is on 🔥 this year with two crazy releases! Cold storage and elastic throughput. Both of these are game changing for EFS customers and make EFS an affordable option for workloads that might have broken the bank before.

0 1 1 0 0

Randall Hunt @jrhunt

3 years ago

Sometimes I want to sign up for an unpaid internship at AWS just so I can rebuild SSO and Cognito but not in Java from 2009. I would accept profit sharing from the literal oceans of cash they would get from providing an AWS native auth solution THAT ALLOWS YOU TO LOGOUT.

9 2 127 0 7

Matthieu Napoli @matthieunapoli

3 years ago

I created a "local API Gateway" Docker image for your HTTP Lambda functions. It basically turns the Lambda RIE into a proper web server. github.com/brefphp/local-…

3 9 32 0 5

Matthieu Napoli @matthieunapoli

3 years ago

@rts_rob "classic" IaC (CF, Terraform, etc.) would IMO bring down the DX of combining Cloudflare services to create apps.

0 1 1 0 0

Matthieu Napoli @matthieunapoli

3 years ago

@rts_rob Tbf I don't see how Clouflare can aim to become a DX-focused supercloud without a next gen IaC/IfC. I see the point about catching up with AWS/CF, but Cloudflare is in a unique place to do much more.

1 1 1 0 0

Keith Townsend @CTOAdvisor

3 years ago

Sometimes, I need this reminder from @kelseyhightower. It takes years of experience to get years of experience. The best way to really learn something is to do it. I'll add to then try to teach it to someone else. #CTOAdvisorStudio Complete Interview: youtu.be/3j9PTlMKis8

13 80 342 0 56

Download Video

Nick Smit @nickste

3 years ago

We've added some super useful capabilities to the EventBridge console that enable you to export your existing Rules to CloudFormation (especially useful for more complex targets), as well as build an event pattern from a schema aws.amazon.com/about-aws/what…

2 15 66 0 4

@norootcause.surfingcomplexity.com on Bluesky @norootcause

3 years ago

Root cause: YAML

8 15 198 0 3

Maciej Winnicki @mthenw

3 years ago

Overall, the platform feels very connected and coherent. Building blocks fit together and you have an impression of a thought-through experience (the thing that I miss the most from AWS).