Cybr

Helping you succeed in cloud security with our online community and training resources.

[Cybr @cybrcom]

@ethanolivertroy This is awesome Troy! Thanks for including us and congrats on the newsletter launch! Subb’d

[Troy @ethanolivertroy]

🟣 I'm starting a research newsletter @ https://t.co/ZidPZzL0Rw
Also I'm giving away a few subs to @cybrcom [https://t.co/L4pSIgHTb5] to random folks that subscribe.
I do a ton of research daily on stuff and people ask me about stuff, this seemed like the best next step. That's it, no pitch 😂

[Cybr @cybrcom]

@aashishhq @lftechnology Nice! Glad you got to see the benefits of serverless with our lab! Thanks for sharing

[Mari @cloudhackermari]

I'm glad to share my write-up on CloudWatch Logs using the AWSLogs CLI — it's truly great to know how to filter logs and search for errors within AWS.
Thanks @cybrcom 😎💙🙌

https://t.co/fiqIevKw5N

[Cybr @cybrcom]

🔒 Most IAM tutorials? All theory.

This lab walks you through:
✅ Creating scoped IAM roles
✅ Fixing misconfigured policies
✅ Using permissions boundaries
✅ Capturing a real S3 flag

Secure, practical AWS training ↓
https://t.co/OYPmJwCL3q

#AWSSecurity #IAM #S3Security

[Cybr @cybrcom]

🗓️ Tomorrow.
💻 Real labs.
🧠 Real skills.
🔒 Real AWS security.

Join @cybrcom’s LIVE study group for the AWS Security Specialty — packed with labs, troubleshooting & prep tools.

🕘 May 20 | 9am PDT

Register: https://t.co/DF33MUcbZP

#AWS #SecuritySpecialty #CyberPrep

[Cybr @cybrcom]

🕵️‍♂️ You don’t need to brute-force 3.66 QUADRILLION guesses to find an AWS Org ID.

Just 360.

In this lab, you simulate a real breach using stolen IAM keys to enumerate S3 buckets and uncover the Org ID with precision.

Try it now 👇
🔗 https://t.co/BOp7pfVdMt

#CloudSecurity

[Cybr @cybrcom]

🔐 You don’t master cloud security by watching slides.
You master it by getting your hands dirty.

Join Cybr’s interactive AWS Security Specialty study group — built by pros, powered by live labs.

🔗 Register: https://t.co/DF33MUcbZP

#AWS #SecuritySpecialty #CloudSecurity

[Cybr @cybrcom]

Want more cloud security gems like this?
We're covering everything in our AWS Security Specialty course.

🔁 RT to help someone secure their AWS setup
👀 Follow @cybrcom for weekly AWS + security insights!

#AWSCommunity #DevSecOps #CloudInfra #SecuritySpecialty

[Cybr @cybrcom]

How to set it up:
1️⃣ Log into your AWS Management Account
2️⃣ Go to Identity Center → Settings → Management
3️⃣ Click “Register a delegated administrator”
4️⃣ Enter your member account ID
5️⃣ Confirm & shift permissions

[Cybr @cybrcom]

Bonus tip:
Deploy permission sets in the delegated account — not your management account.

This follows AWS’s Security Reference Architecture for safer, scalable governance. 🛡️

[Cybr @cybrcom]

Delegating IAM Identity Center creates a security boundary.
The delegated admin:

🚫 Cannot delete your Identity Center
🚫 Cannot modify permission sets from the management account
✅ Can still manage users and assignments safely

[Cybr @cybrcom]

Are you managing IAM Identity Center from your AWS management account?

That’s a security red flag. Here’s how to fix it using AWS best practices. 👇
#AWS #CloudSecurity #IAM #AWSCertified

[Cybr @cybrcom]

IAM Identity Center should not be administered from your management account.
Instead, delegate its administration to a member account (like a Shared Services account). Here's why:

✅ Minimize access to the root account
✅ Reduce config risks
✅ Enforce least privilege

[Cybr @cybrcom]

If you’re serious about AWS security…
Do this lab. Fail. Learn. Win.
https://t.co/OYPmJwCL3q

@therealcybr is building the most realistic cloud security training out there.

#AWS #IAM #S3 #CloudSecurity #DevSecOps #CyberSecurity #HandsOnLabs

[Cybr @cybrcom]

"This looked easy — just modify a policy and create a role."

That’s what I thought.

Then I spent 3 weeks banging my head against one missing permission. 😅

Here’s what I learned in @therealcybr’s IAM + S3 lab 👇
🔗 https://t.co/nnqSJjr4tx

[Cybr @cybrcom]

✅ I learned about trust policies
✅ I got better at testing IAM assumptions
✅ I now respect permissions boundaries
✅ And I’ll never forget s3:ListAllMyBuckets again 😅