Summit Route @SummitRoute

The greatest AWS security consulting service that ever existed. :) No longer active. Run by @0xdabbad00 SummitRoute.com Salt Lake City, UT Joined June 2014

Tweets

433
Followers

3K
Following

243
Likes

639

haroon meer @haroonmeer

5 years ago

We finally got to take the @SummitRoute training by @0xdabbad00 (which we postponed when Covid first hit). 1) It's predictably great; 2) We are getting to learn about dropping these cool looking Canarytoken things...

11 13 56 0 4

View Details

Summit Route @SummitRoute

5 years ago

Read about my concerns with the new Lightsail object storage and a security issue I discovered that has been fixed. Great work by the team there on resolving this so quickly. summitroute.com/blog/2021/08/0…

Scott Piper @0xdabbad00

5 years ago

It's been a while since I reported a security issue to AWS. Happy Friday AWS security team. 😀 (It's not too bad, you can wait until Monday to look at it).

4 0 74 0 1

0 10 30 0 4

View Details

Summit Route @SummitRoute

5 years ago

Ensuring your data in S3 buckets can withstand ransomware attacks or similar threats is not as trivial as you might expect. Here is my guidance. summitroute.com/blog/2021/08/0…

1 34 68 0 8

View Details

Summit Route @SummitRoute

5 years ago

Summit Route is back open for business! If you're interested in AWS security training or other services, we should talk. summitroute.com/#contact

0 9 30 0 0

View Details

Scott Piper @0xdabbad00

6 years ago

I was on Screaming in the Cloud with @QuinnyPig! Have a listen.

Last Week in AWS @LastWeekinAWS

6 years ago

I recently caught up with Scott Piper (@0xdabbad00), an AWS security consultant for @SummitRoute, organizer of @fwdcloudsec, and creator of buff.ly/2Q0qOzd, on Screaming in the Cloud. Have a listen: buff.ly/3bwBW47

1 1 15 0 3

0 9 46 0 1

View Details

Scott Piper @0xdabbad00

6 years ago

My 3rd annual "AWS Security Maturity Roadmap" is out! This is my guide for the steps to securely run on AWS. See what changed this year and download it at summitroute.com/blog/2021/01/1…

5 133 322 0 51

View Details

Scott Piper @0xdabbad00

6 years ago

Did you know Lex, Transcribe, and other AWS AI services will move your data out of the regions you put it in and send your data to AWS affiliates? You should opt out of that. I've described how here. summitroute.com/blog/2021/01/0…

6 21 51 0 6

View Details

Scott Piper @0xdabbad00

6 years ago

For red teams and pentesters, and defenders wanting to know attacks to look for and protect against, I've written down the techniques I would use to attack AWS environments. tldrsec.com/blog/lesser-kn…

5 268 770 0 195

View Details

Summit Route @SummitRoute

6 years ago

New post: Setting up personal G Suite backups on AWS summitroute.com/blog/2020/11/2…

1 9 45 0 14

View Details

Summit Route @SummitRoute

6 years ago

@dagrz @danieljbaird Daniel, the IAM linter I wrote can help find some issues: github.com/duo-labs/parli… Usually the steps for improving IAM include looking for unused creds to get rid of, reducing privs of unnecessary admins, use SSO to avoid long-lived access keys. Happy to chat more.

1 0 2 0 0

View Details

Summit Route @SummitRoute

6 years ago

In "The state of ABAC on AWS" I describe the limitations of AWS related to tagging and the steps AWS needs to take to improve this situation. summitroute.com/blog/2020/11/0…

2 7 30 0 6

View Details

Summit Route @SummitRoute

6 years ago

Big thanks to the folks at @latacora for their tool wernicke to anonymize data like this. github.com/latacora/werni…

0 4 33 0 7

View Details

Summit Route @SummitRoute

6 years ago

I'm making 3.5 years of anonymized Cloudtrail logs from flaws.cloud available for security research, with guidance on how to analyze these with Athena. This is nearly 2M log events from nearly 10K "attackers". summitroute.com/blog/2020/10/0…

3 117 283 0 53

View Details

Scott Piper @0xdabbad00

6 years ago

Following Haroon's lead I've added a /love page for the tweets about my training and other work. Potential clients should find it useful, and it definitely makes me feel good seeing how my work has helped others. 💙 summitroute.com/love/

haroon meer @haroonmeer

6 years ago

It’s awesome to see other security product companies get behind a /love page on their site (instead of bogus awards). Besides being harder to fake, it creates a powerful positive loop. - I can’t be evil if I want to keep /love; - I can’t ship junk; - I can’t short change users.

2 7 26 0 1

0 2 15 0 0

View Details

JaredSmith @mobileatjds

6 years ago

Just finished 2 days of Advanced AWS Security Training with @0xdabbad00 on @_ringzer0. Great practical content that anyone running on AWS should take. Highly recommended.

0 5 14 0 0

View Details

Bala @balapraba

6 years ago

Just finished the AWS Security training by @0xdabbad00 . Was well structured and I appreciated the insights he presented from real world audits and incidents.

1 2 12 0 2

View Details

daguy666 @daguy666

6 years ago

I just finished up a @SummitRoute AWS web security training led by @0xdabbad00 My brain is mush after all that. If you're looking for AWS security training for your team check them out.

0 4 15 0 0

View Details

Sarah Cecchetti @Sarah_Cecc

6 years ago

There are some good tips in this security maturity roadmap from @SummitRoute for enabling AWS Organizations and Access Analyzer to improve the security of your AWS accounts. Good reading! summitroute.com/blog/2020/05/2…

0 1 6 0 1

View Details

Nicolas Grégoire @Agarri_FR

6 years ago

.@0xdabbad00 is a renowned expert on AWS security, his training has excellent feedback and there’s an online 2-day session in August... #JustSaying

Summit Route @SummitRoute

6 years ago

Interested in AWS security training? That's what I do! I'm primarily focused on private training for companies. See what others have said here: summitroute.com/aws_security_t… I also have a remote training open to individuals on August 3-4: ringzer0.training/aws-security.h…