Results for “iam”

Design and implement AWS architectures with best practices for IAM, S3, Lambda, DynamoDB, and serverless deployments.

Manages Google Cloud infrastructure including Compute Engine, Cloud Run, BigQuery, Cloud Functions, GKE, and IAM.

Manages AWS infrastructure across EC2, S3, Lambda, RDS, IAM, CloudFormation, and cost optimization, with guidance on security, monitoring, and operational best practices.

Audit and harden AWS Lambda execution roles by implementing least-privilege IAM policies, permission boundaries, and SCP enforcement.

Identify and test IAM misconfigurations that allow privilege escalation in AWS environments using Pacu, CloudFox, Principal Mapper, and manual analysis.

Manage Amazon Aurora DSQL clusters, schemas, and migrations with MCP tools and CLI scripts, including multi-tenant patterns and IAM-based authentication.

Detects and prevents code injection attacks targeting serverless functions through static analysis, event source poisoning detection, and IAM policy auditing.

Migrate applications from Google AI Studio to Google Cloud Agent Platform, enabling enterprise features like IAM, billing, and SLAs.

Assess cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, and IaC security gaps across AWS, Azure, and GCP with MITRE ATT&CK mapping.

Conduct authorized AWS penetration testing using Pacu to enumerate IAM configurations, discover privilege escalation paths, test credential harvesting, and validate security controls through systematic attack simulation.

Assesses cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, and IaC security gaps across AWS, Azure, and GCP with MITRE ATT&CK mapping.

Configures HashiCorp Vault dynamic secrets engines for database credentials, AWS IAM keys, and PKI certificates with automatic generation, lease management, and credential rotation.

Map cloud infrastructure assets and relationships into a Neo4j graph using Cartography to discover attack paths, IAM permission chains, and security gaps across AWS, GCP, and Azure.

Audit AWS S3 bucket permissions to identify publicly accessible buckets, overly permissive ACLs, misconfigured bucket policies, and missing encryption settings using AWS CLI, Prowler, and IAM Access Analyzer.

Audit Google Cloud Platform environments for security misconfigurations using Forseti, Security Command Center, and gcloud CLI to evaluate IAM policies, firewall rules, storage permissions, and CIS compliance.

Enumerate and audit GCP storage buckets and IAM policies using GCPBucketBrute and gcloud CLI to identify privilege escalation paths and overly permissive access.

Operates AI infrastructure as a production dependency: manages GPU utilization, MCP servers, LLM gateways, inference pipelines, token costs, semantic caching, and model observability.

Operates Google Cloud Platform resources via the gcloud CLI, covering compute instances, storage buckets, BigQuery, Cloud Run, GKE, IAM, and billing. It checks the environment, authenticates, confirms destructive operations, and diagnoses common errors.

Evaluates Google Cloud workloads against the Well-Architected Framework security pillar, identifies security requirements, and provides actionable recommendations for IAM, network security, data protection, and operational security.

Hardens serverless compute platforms (AWS Lambda, Azure Functions, Google Cloud Functions) by enforcing least privilege IAM roles, eliminating hardcoded secrets, scanning dependencies for vulnerabilities, validating input, securing function URLs, and enabling runtime monitoring.

Guides setup and operation of the aws_dynamodb_cdc input in Redpanda Connect, which streams change data capture from AWS DynamoDB into Redpanda or Kafka using DynamoDB Streams. Covers enabling streams, IAM policies, checkpoint tables, snapshot modes, table discovery, and operational constraints.

Deploy, monitor, and manage GCP services with battle-tested patterns.

Reference for AWS services, architecture patterns, and Well-Architected Framework implementation.

Use Pacu modules for AWS privilege escalation, persistence, and backdooring during authorized penetration tests.

Enumerate AWS resources and identify misconfigurations using ScoutSuite to generate interactive security reports.

Create, configure, and manage AWS Lambda serverless functions for event-driven compute, including triggers, debugging, cold start optimization, and layers.

Executes AWS CLI commands with parallel execution, CloudWatch statistics syntax, Cost Explorer aggregation, and output token limits.

Authorized security assessment for cloud, container, and Kubernetes environments covering metadata SSRF, IAM misconfigurations, container escape paths, and cluster RBAC review.

Collect and analyze logs, snapshots, and metadata from AWS, Azure, and GCP to investigate security breaches in cloud environments.

Query AWS resources using natural language, translating intent into read-only AWS CLI commands for EC2, S3, RDS, Lambda, ECS, EKS, and more.