Posted on

Ermetic launches open source tool that analyzes AWS CloudTrail AccessDenied events – Help Net Security

Ermetic launches open source tool that analyzes AWS CloudTrail AccessDenied events - Help Net Security

Ermetic released a free open source tool for managing AccessDenied Events in Amazon Web Services (AWS) that automates time consuming cloud access policy troubleshooting and correction.

Ermetic Access Undenied on AWS

Access Undenied on AWS analyzes AWS CloudTrail AccessDenied events, scans the environment to identify and explain the reasons for the events, and offers actionable least-privilege remediation suggestions.

The project is led by Noam Daham, research lead at Ermetic.

“Even if you know the policy type causing ‘access denied’, which isn’t always the case, you still need to find the policy and the statement inside the policy causing the denial, and replace it with a least-privilege alternative,” Noam Dahan. “Basically, you give the Access Undenied on AWS tool a CloudTrail event with an “Access Denied” outcome, and it will tell you how to fix it!”

Access Undenied on AWS addresses some of the peskiest Access Denied challenges encountered by DevOps and security teams on a daily basis, including:

  • Some AccessDenied messages still do not provide details. Among the services for which some, or even many, messages are lacking in detail are: S3, IAM, STS, CloudWatch, EFS, DynamoDB, Redshift, Opensearch and ACM.
  • When the reason for AccessDenied is an explicit deny, users can have difficulty tracking down the specific policy and statement that generated the explicit deny. Specifically, when the reason is an explicit deny in a service control policy (SCP), it is difficult to find and assess every single policy in the organization that applies to the account.
  • Meanwhile, when the problem is a missing allow statement, it can still be challenging to create the least-privilege policy that allows the desired access without granting excessive permissions.

Access Undenied on AWS is available now and supports policies for many resources and some of the most common condition keys. This open source project is also soliciting input from the community through contributions of new issues in the repository.

Posted on

How aerial imagery solves problems for outdoor events – Spatial Source

How aerial imagery solves problems for outdoor events - Spatial Source

PARTNER CONTENT

MetroMap’s high-resolution aerial imagery and measuring tools are a game-changer for outdoor event managers.

South Australia’s biggest domestic cycling race, the Super Series, uses MetroMap’s aerial imagery to overcome many logistical and time challenges in putting on its nine events. MetroMap enabled Jake Thomas, Super Series Race Director and Event Coordinator for AusCycling in SA, to manage the months-long planning processes better, communicate more effectively with stakeholders and grow the event through improved time management.

Remote inspections

The Super Series has a significant footprint across seven different race locations, five different local government areas and four events situated more than 50 km from the Adelaide CBD. Courses range from a couple of kilometres in length to over 100 km. MetroMap’s broad capture program ensured Thomas and his team could remotely examine and take ground-level measurements of every road and host location without leaving their office.

Thomas described how MetroMap helps before an event. “MetroMap has been really useful for the Super Series this year, especially with planning, because it’s meant that we can do things like venue inspections, road inspections, and all other the things that normally take a trip out to the site,” he said. “Being based in Gepps Cross makes it difficult to get to every location while we’re trying to organise nine events at once.”

In particular, MetroMap’s remote inspection and measurement capabilities simplified the planning for a completely new Super Series course in a complex Adelaide CBD location. Thomas said that MetroMap helped streamline that parts of that intricate event.

“One of the races that we developed for this year’s Super Series was the East End street race,” he said. “MetroMap allowed us to map the exact distance of the barriers needed for that venue, meaning we didn’t need to pay for a stack of barriers sitting unused. We were able to do that without taking a walking wheel and measuring open roads in the middle of the city.

“We would have done a lot measuring on foot without MetroMap.”

Stakeholder communication

Aus Cycling SA made MetroMap imagery a crucial part of the participant and other essential stakeholder communications. MetroMap imagery included in the event manuals showed participants the course layout and site plan, helping to ensure the event would run smoothly.

Assets built on quality imagery communicated more than just location and infrastructure information; they also provided benefits in how the event and AusCycling was perceived.

“Having a better image than anybody has ever seen legitimises what you’re doing,” said Thomas. “Turning up with a super detailed map to meetings with council, residents, or traders groups, tells them we know what we’re doing and has given us an air of authority.”

Better time management means better events

MetroMap better uses the event managers’ finite time, optimising the planning process to enable better planning with allotted resources. All recovered time supports event improvements and accelerates their growth.

“Super Series being an annual race means we get an opportunity to take what we’ve done year-on-year and constantly make it better. We want more people to come out. We want the event experience to get better,” said Thomas.

“It’s tricky when to find more time before the event day, but recovering 15 minutes back here, two hours back there, and half a day back there, frees up time to take on those extra projects that might have been on the backburner for a couple of years. You don’t save time necessarily, you just use your time better do things that you otherwise wouldn’t be able to.”

Everyday tools for event managers

The Super Series has crowned its winners for 2021, but MetroMap has become an ongoing part of Thomas’ and the AusCycling SA office’s workflow.

“We’re using MetroMap at least 10 times a week,” said Thomas. “It’s become my first stop when I’ve got a question about what something looks like, or where I’m going to put something at an event. It’s become second nature that I’m curious about something and I go to MetroMap and look it up.”

Learn more about how MetroMap can help your business at www.metromap.com.au.

Stay up to date by getting stories like this delivered to your inbox.
Sign up to receive our free weekly Spatial Source newsletter.