corpus.blog
41554 blogs · [ { "id": "01a0d45c-ee86-7186-b9b7-3748c6be6ac6", "title": "Vulnerability Prioritization Beyond CVSS: The Rules-Based Model I Actually Use", "url": "https://thehiddenport.dev/posts/vulnerability-prioritization-beyond-cvss/", "published_at": "2026-09-24T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d5af1ed2c", "title": "Vulnerability Scanner Architecture: What to Scan, How to Dedupe, When to Build", "url": "https://thehiddenport.dev/posts/vulnerability-scanner-architecture/", "published_at": "2026-09-05T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d5b57f900", "title": "AI Agents Accessing AWS: The IAM Patterns That Scare Me", "url": "https://thehiddenport.dev/posts/ai-agents-accessing-aws/", "published_at": "2026-09-01T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d5c1ac674", "title": "Why Most Vulnerability Management Programs Fail (And What Actually Works)", "url": "https://thehiddenport.dev/posts/why-vulnerability-management-programs-fail/", "published_at": "2026-08-22T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d5cf810fd", "title": "AWS IAM Identity Center: Account Access Is Now Optional — And Why That Matters", "url": "https://thehiddenport.dev/posts/iam-identity-center-account-access-optional/", "published_at": "2026-08-19T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d5d7fb402", "title": "ISO 27001 for AWS: What Auditors Actually Ask For", "url": "https://thehiddenport.dev/posts/iso-27001-aws-audit-prep/", "published_at": "2026-08-11T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d5e060a37", "title": "AWS IAM Permission Boundaries: The Sandbox Pattern That Actually Works", "url": "https://thehiddenport.dev/posts/aws-iam-permission-boundaries/", "published_at": "2026-08-03T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d5ee0c114", "title": "AWS Security Hub MCP App: Turn Compliance Findings into Action", "url": "https://thehiddenport.dev/posts/aws-security-hub-mcp-app/", "published_at": "2026-08-01T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d5f8da88e", "title": "AWS GuardDuty Runtime Monitoring: The Security Agent That Sees Inside Your Workloads", "url": "https://thehiddenport.dev/posts/aws-guardduty-runtime-monitoring/", "published_at": "2026-07-27T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d5faefad7", "title": "AWS Secrets Manager Now Sends Events to EventBridge: How to Set Up Rotation Alerts", "url": "https://thehiddenport.dev/posts/aws-secrets-manager-eventbridge-notifications/", "published_at": "2026-07-25T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d5fca7be7", "title": "AWS GuardDuty vs Security Hub: What Each Does and When You Need Both", "url": "https://thehiddenport.dev/posts/aws-guardduty-vs-security-hub/", "published_at": "2026-07-22T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d5fcd806e", "title": "I Investigated a Real Phishing Attack — Here's the Full Kill Chain", "url": "https://thehiddenport.dev/posts/real-world-phishing-incident-response/", "published_at": "2026-07-17T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d60690fca", "title": "AWS CloudTrail Log Analysis: How to Find Who Did What (And When)", "url": "https://thehiddenport.dev/posts/aws-cloudtrail-log-analysis/", "published_at": "2026-07-13T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d6128ae54", "title": "AWS SCPs That Actually Work: Practical Guide for Real Teams", "url": "https://thehiddenport.dev/posts/aws-scp-best-practices/", "published_at": "2026-07-08T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d61b4e839", "title": "AmazonSSMManagedInstanceCore: Full Policy Breakdown", "url": "https://thehiddenport.dev/posts/amazonssmmanagedinstancecore-iam-policy-explained/", "published_at": "2026-07-07T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d622e371a", "title": "AWS Incident Response: 5 Scenarios & How to Contain Them", "url": "https://thehiddenport.dev/posts/aws-incident-response-scenarios/", "published_at": "2026-07-07T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d62ecd252", "title": "AWS Misconfigurations I Find in Every Security Audit", "url": "https://thehiddenport.dev/posts/aws-security-misconfigurations-guide/", "published_at": "2026-07-07T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d631f95c0", "title": "AWS Security Checklist: The 30-Minute Audit I Run on Every Account", "url": "https://thehiddenport.dev/posts/aws-security-checklist-2026/", "published_at": "2026-07-07T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d63587099", "title": "EKS Security Best Practices: RBAC, Pod Security & IRSA Hardening (2026)", "url": "https://thehiddenport.dev/posts/eks-security-best-practices/", "published_at": "2026-07-07T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d63e7ab90", "title": "IAM Users Are Dead: Modern AWS Access Control for 2026", "url": "https://thehiddenport.dev/posts/aws-iam-users-alternatives/", "published_at": "2026-07-07T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d64e08326", "title": "Meeting CIS Benchmarks for EC2: A Practical Guide", "url": "https://thehiddenport.dev/posts/ec2-cis-benchmarks-guide/", "published_at": "2025-09-25T08:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d65b8d945", "title": "EKS Security Monitoring: Audit Logs, Falco Runtime Detection & GuardDuty", "url": "https://thehiddenport.dev/posts/eks-security-monitoring/", "published_at": "2025-09-17T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d65df757d", "title": "eJPTv2 Prep Guide: Study Plan for Cloud Security Engineers", "url": "https://thehiddenport.dev/posts/ejptv2-journey/", "published_at": "2025-09-08T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d66b272c2", "title": "IDOR in AWS APIs: Real Examples from Bug Bounty & How to Fix Them", "url": "https://thehiddenport.dev/posts/aws-preventing-idor/", "published_at": "2025-06-27T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d67178625", "title": "AWS GuardDuty Setup: Route Findings to Slack & Your SIEM in 10 Minutes", "url": "https://thehiddenport.dev/posts/aws-guardduty-setup/", "published_at": "2025-06-24T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d67427585", "title": "Detect AWS IAM Privilege Escalation with CloudTrail", "url": "https://thehiddenport.dev/posts/aws-detecting-privilege-escalation/", "published_at": "2025-06-20T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d67ba412d", "title": "Hardened Amazon Linux 2 AMI with EC2 Image Builder", "url": "https://thehiddenport.dev/posts/aws-ami-hardening/", "published_at": "2025-06-09T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d67f29a8d", "title": "IAM Least Privilege in AWS: Access Analyzer Guide", "url": "https://thehiddenport.dev/posts/aws-enforcing-least-privilege/", "published_at": "2025-06-09T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d6835ccf1", "title": "AWS Session Manager Setup: Replace SSH with Zero Inbound Ports", "url": "https://thehiddenport.dev/posts/aws-securing-ec2-access-with-ssm/", "published_at": "2025-06-03T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d68f26d73", "title": "EC2 Hardening Guide: Secure AWS Instances Step by Step", "url": "https://thehiddenport.dev/posts/aws-ec2-hardening/", "published_at": "2025-05-29T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d6985a036", "title": "AWS Incident Response Toolkit: Playbook, Terraform Automation & Forensic Tools", "url": "https://thehiddenport.dev/posts/aws-ir-toolkit/", "published_at": "2025-05-20T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d6a276118", "title": "AWS Security Monitoring Without the Enterprise Price Tag", "url": "https://thehiddenport.dev/posts/affordable-aws-security-monitoring/", "published_at": "2025-05-19T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d6a56d877", "title": "Stop Using AWS Access Keys: The Temporary Credentials Playbook", "url": "https://thehiddenport.dev/posts/aws-temporary-credentials-security/", "published_at": "2025-05-11T08:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d6a9d0114", "title": "AWS Incident Response Guide: The Framework for Cloud-Native IR (2026)", "url": "https://thehiddenport.dev/posts/incident-response-aws-guide/", "published_at": "2025-05-04T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d6b8dbb9b", "title": "How I Passed the AWS Certified Security – Specialty (SCS-C02) Exam in 2025", "url": "https://thehiddenport.dev/posts/aws-scs-c02-exam-experience/", "published_at": "2025-04-28T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d6bc605e1", "title": "Disclaimer", "url": "https://thehiddenport.dev/disclaimer/", "published_at": "2025-04-26T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d6be51cc8", "title": "All Blog Posts", "url": "https://thehiddenport.dev/blog/", "published_at": "2025-04-25T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d6c1d0e85", "title": "Automate IAM Least Privilege with Access Analyzer & Terraform", "url": "https://thehiddenport.dev/posts/iam-access-analyzer-least-privilege/", "published_at": "2025-04-21T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d6c1ed92b", "title": "How to Detect AWS Root Account Usage (And Respond to It)", "url": "https://thehiddenport.dev/posts/detect-root-account-usage/", "published_at": "2025-04-21T00:00:00+00:00" }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d6c24cddb", "title": "About", "url": "https://thehiddenport.dev/about/", "published_at": null }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d6ce94960", "title": "AWS Security Consulting — Sevilla, Spain", "url": "https://thehiddenport.dev/consulting/", "published_at": null }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d6d9f3575", "title": "AWS Security Resources: Tools, Guides & Free Downloads", "url": "https://thehiddenport.dev/resources/", "published_at": null }, { "id": "01a087ec-f1a1-70c1-9dd8-1a3d6df5097d", "title": "Download: AWS Incident Response Toolkit", "url": "https://thehiddenport.dev/ir-toolkit-download/", "published_at": null } ] posts Claim your blog
Back to thehiddenport.dev
Blog · corpus.blog/blogs/thehiddenport.dev/posts

thehiddenport.dev

thehiddenport.dev

2026

Vulnerability Prioritization Beyond CVSS: The Rules-Based Model I Actually Useoriginal ↗
24 Sept 2026
Vulnerability Scanner Architecture: What to Scan, How to Dedupe, When to Buildoriginal ↗
5 Sept 2026
AI Agents Accessing AWS: The IAM Patterns That Scare Meoriginal ↗
1 Sept 2026
Why Most Vulnerability Management Programs Fail (And What Actually Works)original ↗
22 Aug 2026
AWS IAM Identity Center: Account Access Is Now Optional — And Why That Mattersoriginal ↗
19 Aug 2026
ISO 27001 for AWS: What Auditors Actually Ask Fororiginal ↗
11 Aug 2026
AWS IAM Permission Boundaries: The Sandbox Pattern That Actually Worksoriginal ↗
3 Aug 2026
AWS Security Hub MCP App: Turn Compliance Findings into Actionoriginal ↗
1 Aug 2026
AWS GuardDuty Runtime Monitoring: The Security Agent That Sees Inside Your Workloadsoriginal ↗
27 Jul 2026
AWS Secrets Manager Now Sends Events to EventBridge: How to Set Up Rotation Alertsoriginal ↗
25 Jul 2026
AWS GuardDuty vs Security Hub: What Each Does and When You Need Bothoriginal ↗
22 Jul 2026
I Investigated a Real Phishing Attack — Here's the Full Kill Chainoriginal ↗
17 Jul 2026
AWS CloudTrail Log Analysis: How to Find Who Did What (And When)original ↗
13 Jul 2026
AWS SCPs That Actually Work: Practical Guide for Real Teamsoriginal ↗
8 Jul 2026
AmazonSSMManagedInstanceCore: Full Policy Breakdownoriginal ↗
7 Jul 2026
AWS Incident Response: 5 Scenarios & How to Contain Themoriginal ↗
7 Jul 2026
AWS Misconfigurations I Find in Every Security Auditoriginal ↗
7 Jul 2026
AWS Security Checklist: The 30-Minute Audit I Run on Every Accountoriginal ↗
7 Jul 2026
EKS Security Best Practices: RBAC, Pod Security & IRSA Hardening (2026)original ↗
7 Jul 2026
IAM Users Are Dead: Modern AWS Access Control for 2026original ↗
7 Jul 2026

2025

Meeting CIS Benchmarks for EC2: A Practical Guideoriginal ↗
25 Sept 2025
EKS Security Monitoring: Audit Logs, Falco Runtime Detection & GuardDutyoriginal ↗
17 Sept 2025
eJPTv2 Prep Guide: Study Plan for Cloud Security Engineersoriginal ↗
8 Sept 2025
IDOR in AWS APIs: Real Examples from Bug Bounty & How to Fix Themoriginal ↗
27 Jun 2025
AWS GuardDuty Setup: Route Findings to Slack & Your SIEM in 10 Minutesoriginal ↗
24 Jun 2025
Detect AWS IAM Privilege Escalation with CloudTrailoriginal ↗
20 Jun 2025
Hardened Amazon Linux 2 AMI with EC2 Image Builderoriginal ↗
9 Jun 2025
IAM Least Privilege in AWS: Access Analyzer Guideoriginal ↗
9 Jun 2025
AWS Session Manager Setup: Replace SSH with Zero Inbound Portsoriginal ↗
3 Jun 2025
EC2 Hardening Guide: Secure AWS Instances Step by Steporiginal ↗
29 May 2025
AWS Incident Response Toolkit: Playbook, Terraform Automation & Forensic Toolsoriginal ↗
20 May 2025
AWS Security Monitoring Without the Enterprise Price Tagoriginal ↗
19 May 2025
Stop Using AWS Access Keys: The Temporary Credentials Playbookoriginal ↗
11 May 2025
AWS Incident Response Guide: The Framework for Cloud-Native IR (2026)original ↗
4 May 2025
How I Passed the AWS Certified Security – Specialty (SCS-C02) Exam in 2025original ↗
28 Apr 2025
Disclaimeroriginal ↗
26 Apr 2025
All Blog Postsoriginal ↗
25 Apr 2025
Automate IAM Least Privilege with Access Analyzer & Terraformoriginal ↗
21 Apr 2025
How to Detect AWS Root Account Usage (And Respond to It)original ↗
21 Apr 2025

Undated

Aboutoriginal ↗
—
AWS Security Consulting — Sevilla, Spainoriginal ↗
—
AWS Security Resources: Tools, Guides & Free Downloadsoriginal ↗
—
Download: AWS Incident Response Toolkitoriginal ↗
—