Evidence search

Search

Search titles, summaries, topics, providers, authors, and the full open-access corpus.

Results for “NIST”

129 publications

Technical guidePublished August 28, 2026Series April 12, 2026Source-based analysis

Require EC2 IMDSv2 without breaking container credentials

Separate metadata token requirements from response hop limits, then verify both existing instances and future launches before declaring the migration complete.

Workload security · AWS · By Cloud Security Desk

Research notePublished August 28, 2026Series March 27, 2026Source-based analysis

Define the expiry boundary for Entra privileged access

PIM records activation and expiry, but the protected application still determines when changed authority takes effect. Review both sides of that boundary.

Identity & access · Microsoft Entra · By Cloud Security Desk

Technical guidePublished August 28, 2026Series March 19, 2026Source-based analysis

Measure recovery by the service you can restore

Define application acceptance, recoverable data, and a complete timeline before treating a completed restore job as proof of recovery.

Resilience · AWS / PostgreSQL · By Cloud Security Desk

Technical guidePublished August 28, 2026Series March 11, 2026Source-based analysis

Keep MCP tokens bound to the intended resource

Keep token audiences, user consent, and downstream tool authority separate when reviewing a protected HTTP MCP service.

AI systems · MCP · By Cloud Security Desk

Technical guidePublished August 28, 2026Series March 3, 2026Source-based analysis

Test Kubernetes egress policies beyond a successful DNS lookup

Separate DNS resolution, source egress, destination ingress, and application identity when testing Kubernetes network isolation.

Workload security · Kubernetes / Cilium · By Cloud Security Desk

Technical guidePublished August 28, 2026Series February 7, 2026Source-based analysis

Protect backup copies from the account that runs production

Map deletion authority, retention protection, keys, and recovery identities so a surviving backup has a usable path back to service.

Resilience · AWS · By Cloud Security Desk

Technical guidePublished August 28, 2026Series January 14, 2026Source-based analysis

Choose the S3 object events your investigation will need

CloudTrail event history is not an object-access ledger. Build selectors around the questions an investigation must answer, then test the exclusions.

Detection & response · AWS · By Cloud Security Desk

Technical guidePublished August 28, 2026Series January 6, 2026Source-based analysis

Lock GitHub deployment trust to the job you intend

A short-lived token still needs a narrow trust decision. Review the subject, deployment environment, reusable workflow and AWS role together.

Identity & access · AWS / GitHub · By Cloud Security Desk

Technical guideJuly 3, 2026Illustrative analysis

Recover the control plane before you need it

A recovery plan that depends on the compromised identity system is an aspiration. Build and test an independent administrative path.

Resilience · Identity & access · AWS / Azure / Google Cloud · By Umair Akbar and Ahmed Elshekh