Introduction AWS Single Sign-On (SSO) provides a centralized identity management solution for accessing multiple AWS accounts and applications. As organizations grow, managing user access across various accounts and permission sets becomes challenging. To simplify this process, we can use a script to retrieve and display AWS SSO user, group, and permission…

Architecture: Procedure: Step 1: Create S3 bucket in Security-IRM. Set following bucket policy to allow CloudTrail to check the bucket ACLs and put objects in specific S3 paths: Create a lifecycle configuration rule to have 1 day retention. Step 2: Create SNS in Master Account. Append the following Access…

Overview: Set up to automatically get alerts on new findings in Security Hub using EventBridge. Set up to manually trigger an alert on an available finding to a specific User/Team using EventBridge. Set up to remediate CIS AWS Foundations Benchmark 1.1, 3.1 to 3.14 using CloudFormation. Set up to automatically address…

Create the AWS SSO Application for Amazon MWAA (AWS SSO) Create the Amazon MWAA Identity Provider (IAM) Create a Policy to the Amazon MWAA user access role (IAM) Create the Amazon MWAA user access role (IAM) Create the AWS SSO Attribute Mappings (AWS SSO) Assign User(s) and Test 1. Create the AWS SSO Application for Amazon MWAA (AWS SSO) First create…

EKS: Kubernetes control plane consists of at least two API server instances and three etcd instances that run across three Availability Zones within a Region. Amazon EKS: Actively monitors the load on control plane instances and automatically scales them to ensure high performance. Automatically detects and replaces unhealthy control plane…