Articles related to cloud security from the team that helps B2C companies build and defend revenue with AI.
This is part of our cloud security and things that are obvious once you see them series. Duhh... safe! Amazon's explanation of deleting a versioned object and the SDK documentation do not give an example of permanently deleting a versioned object. Here's how to do it: require 'aws-sdk' s3 = Aws:
Read moreThis is part of our cloud security series. Do you have unencrypted S3 objects lying around? Don't! Here's the safe way to retroactively enable server-side encryption: Step 1: Make a backup bucket AWS management console is easiest. Call it [my-bucket]-backup. Step 2: Copy one way require 'aws-sdk' s3 = Aws:
Read moreThis is part of our antipatterns and cloud security series. Per an official Ruby CVE in 2013: JSON.load should never be given input from unknown sources. If you are processing JSON from an unknown source, always use JSON.parse. I feel like that should be shouted from the rooftops.
Read moreThis is part of our antipatterns and cloud security series. Nothing's worse than a data breach, so protect yourself by cleaning up your gists—both public and private. git clone https://github.com/faradayio/gistkiller.git cd gistkiller bundle install ruby gistkiller.rb The first time you run it, it
Read more