Author: Keith Stafford

When AWS discusses the concept of security maturity, one of the easiest and most effective quick wins they recommend is making sure that every account within your organization has the appropriate Security Contact properly configured. While this might initially seem like a minor or routine housekeeping task, it is, in reality, a crucial step that…

Ensuring that cloud workloads remain fully compliant with important industry standards such as CIS, PCI DSS, or HIPAA is one of the most significant and ongoing challenges that organizations encounter in today’s fast-paced digital landscape. AWS environments, in particular, tend to expand rapidly, often spanning numerous accounts while evolving and changing at a continuous and…

AWS has taken a major step forward in securing root user credentials by now enforcing multi‑factor authentication (MFA) for root users across all account types—including standalone, management, and member accounts. This latest AWS Identity and Access Management (IAM) update closes the gap for member account root users, building a stronger foundation in AWS’s “secure by…

Managing root user credentials across multiple AWS accounts has long been a challenge for organizations, especially those operating at scale. Recognizing this, AWS has introduced a new capability that allows security teams to centrally manage root access for member accounts within AWS Organizations. What’s new?Each AWS account is provisioned with a root user that has…

In this post we discuss AWS IAM Identity Center, a powerful service designed to streamline Single Sign-On (SSO) across AWS accounts and applications. What is AWS IAM Identity Center?AWS IAM Identity Center, formerly known as AWS Single Sign-On (SSO), is a cloud service from Amazon Web Services that simplifies the management of SSO access and…