Blogs

AWS CDK Risk: Exploiting a Missing S3 Bucket Allow Takeover

Aquasec

In June 2024, we uncovered a security issue related to the AWS Cloud Development Kit (CDK), an open-source project.

Visit Site

AWS CDK Risk: Exploiting a Missing S3 Bucket Allow Takeover
TrailShark: Understanding AWS API and Service InteractionsAquasec Embracing the Future: AWS Customers Leverage Fargate for ECS and EKS DeploymentsAquasec New npm Flaws Let Attackers Better Target Packages for Account TakeoverAquasec Threat Alert: TeamTNT Pwn Campaign Against Docker and K8s EnvironmentsAquasec Malware Forensic Analysis: Capturing What Attackers Leave BehindAquasec Cloud Workload Security: Aqua Shines in GigaOm's Radar ReportAquasec Re: April 23rd AWS EU-WEST-1 Service InterruptionRedis Grafana Is Not Worried About AWS CommercializationThenewstack Cloud Systems: Deploying to Amazon ECSPulumi AWS Enterprise Container Management with PulumiPulumi How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi Neo Integrations: MCP Servers and Cloud CLIsPulumi Develop, Preview, TestCss Tricks Data Rock N' Roll at AWS re:InventMotherduck Issue a new certVercel Announcing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket with Amazon EKS Auto Mode in PulumiPulumi Pulumi AWS Cloud Control Provider is Generally AvailablePulumi re:Invent 2020 EKS Feature ReleasesPulumi What's new in the Go Cloud Development Kit - The Go Programming LanguageGo