DevSecOps
Adoption Is a Security Control: Notes from Paving a Road
A control developers route around isn't a control. Field notes on making the secure path the easy path: 40% less remediation time, 27% less pipeline latency.
RivasSec
Infrastructure. Security. Insight.
Field notes on infrastructure security, cloud hardening, Kubernetes, IAM, and OSINT by RivasSec.
Start here
DevSecOps
IAM Roles That Fail Loud: Small Defaults, Big Difference
A small Pulumi library that treats IAM safety as a precondition: mandatory permissions boundary, no wildcard trust, no wildcard actions, every opt-out explicit.
Latest posts
Adoption Is a Security Control: Notes from Paving a Road
A control developers route around isn't a control. Field notes on making the secure path the easy path: 40% less remediation time, 27% less pipeline latency.
Continue reading
IAM Roles That Fail Loud: Small Defaults, Big Difference
A small Pulumi library that treats IAM safety as a precondition: mandatory permissions boundary, no wildcard trust, no wildcard actions, every opt-out explicit.
Continue reading