▶ Videos →

📰 Dev.to · Bala Paranj

126 articles · Updated every 3 hours · View all reads

All Articles 188,548 Blog Posts 170,396 Tech Tutorials 50,515 Research Papers 36,766 News 23,131 ⚡ AI Lessons

Your Deprecated Services Are Your Weakest Doors

Dev.to · Bala Paranj 20h ago

Your Deprecated Services Are Your Weakest Doors

✓ Human-authored analysis; AI used for formatting and proofreading. IaC tools don't track AWS...

Tag Confusion in the AWS Load Balancer Controller: How a K8s Developer Can Open Your Database to the Internet

Dev.to · Bala Paranj 1d ago

Tag Confusion in the AWS Load Balancer Controller: How a K8s Developer Can Open Your Database to the Internet

✓ Human-authored analysis; AI used for formatting and proofreading. The AWS Load Balancer...

Agents That Build Infrastructure Can Now Discover the Tool That Checks It

Dev.to · Bala Paranj 2d ago

Agents That Build Infrastructure Can Now Discover the Tool That Checks It

We registered Stave as an ARD resource. AI agents that generate AWS infrastructure can now discover and call a verification service without knowing it exists in

34 Findings in 8 IAM Roles. What You Can't See One Policy at a Time

Dev.to · Bala Paranj 3d ago

34 Findings in 8 IAM Roles. What You Can't See One Policy at a Time

I built every IAM anti-pattern from a Reddit thread as real AWS resources and ran two tools against them. Access Analyzer found 0. Stave found 34, including 3 c

Your S3 Bucket is Public, But AWS Can't Tell You

Dev.to · Bala Paranj 4d ago

Your S3 Bucket is Public, But AWS Can't Tell You

AWS Trusted Advisor's S3 Bucket Permissions check (Pfx0RwqBli) flags a third red criterion. Trusted Advisor does not have permission to check the policy, or the

Tagged 'Internal', Readable by Everyone: Shopify's Production iOS Bucket and the Policy That Contradicted Its Own Tags

Dev.to · Bala Paranj 5d ago

Tagged 'Internal', Readable by Everyone: Shopify's Production iOS Bucket and the Policy That Contradicted Its Own Tags

✓ Human-authored analysis; AI used for formatting and proofreading. At some point, someone added a...

The Mobile Test Build Bucket: Slack's S3 Exposure and the Safety Net That Wasn't There

Dev.to · Bala Paranj 6d ago

The Mobile Test Build Bucket: Slack's S3 Exposure and the Safety Net That Wasn't There

✓ Human-authored analysis; AI used for formatting and proofreading. A researcher pointed at a...

You Don't Own Your CloudFront Subdomain Until You Register the Distribution

Dev.to · Bala Paranj 1w ago

You Don't Own Your CloudFront Subdomain Until You Register the Distribution

✓ Human-authored analysis; AI used for formatting and proofreading. A researcher checked...

The Detection Layer That Was Quietly Off: GuardDuty Disabled on an AWS Account

Dev.to · Bala Paranj ☁️ DevOps & Cloud 1w ago

The Detection Layer That Was Quietly Off: GuardDuty Disabled on an AWS Account

✓ Human-authored analysis; AI used for formatting and proofreading. A researcher looked at an AWS...

First Action After Compromise: Blind the Audit

Dev.to · Bala Paranj ☁️ DevOps & Cloud 3w ago

First Action After Compromise: Blind the Audit

✓ Human-authored analysis; AI used for formatting and proofreading. If you're an attacker who's...

The AWS Reference App That Hands Out Admin Access: Lambda Privilege Escalation via CloudFront Extensions Console

Dev.to · Bala Paranj ☁️ DevOps & Cloud 3w ago

The AWS Reference App That Hands Out Admin Access: Lambda Privilege Escalation via CloudFront Extensions Console

✓ Human-authored analysis; AI used for formatting and proofreading. In October 2024, a researcher...

Four CLI Commands From Anonymous to Admin: Your Cognito Configuration Is the Vulnerability

Dev.to · Bala Paranj ☁️ DevOps & Cloud 3w ago

Four CLI Commands From Anonymous to Admin: Your Cognito Configuration Is the Vulnerability

✓ Human-authored analysis; AI used for formatting and proofreading. In June 2023 Serj Novoselov...

cfn_nag finds problems in templates. Stave finds problems in reality.

Dev.to · Bala Paranj ☁️ DevOps & Cloud 4w ago

cfn_nag finds problems in templates. Stave finds problems in reality.

cfn_nag scans CloudFormation templates for insecure patterns. Stave evaluates observed infrastructure state with duration tracking, multi-cloud support, and for

Your Cloud Has 10^100 Possible States. Stop Trying to Predict Which Ones are Safe. Start Defining Which Ones are Forbidden.

Dev.to · Bala Paranj 🚀 Entrepreneurship & Startups 4w ago

Your Cloud Has 10^100 Possible States. Stop Trying to Predict Which Ones are Safe. Start Defining Which Ones are Forbidden.

Prediction asks: 'what COULD happen?' and classifies each possibility as safe or unsafe. The state space is 10^100+. Prediction is mathematically impossible at

Five Mental Models From the Data Center that are Breaking Your Cloud Security

Dev.to · Bala Paranj ☁️ DevOps & Cloud 1mo ago

Five Mental Models From the Data Center that are Breaking Your Cloud Security

We moved to the cloud but kept our data center mental models. Trust is still based on network location. Hardening still targets the OS. Audits still check the T

Zero Permissions on Secrets Manager. Full Access to Your Secrets.

Dev.to · Bala Paranj ☁️ DevOps & Cloud 1mo ago

Zero Permissions on Secrets Manager. Full Access to Your Secrets.

✓ Human-authored analysis; AI used for formatting and proofreading. A 2025 CloudGoat walkthrough...

Why the Capital One Breach Wasn't About One Misconfiguration

Dev.to · Bala Paranj ☁️ DevOps & Cloud 1mo ago

Why the Capital One Breach Wasn't About One Misconfiguration

Single misconfigurations are noise. Correlated signals are the breach. How compound predicate evaluation turns weak findings into critical alerts.

Stop Adding Scanners, Start Deleting Paths

Dev.to · Bala Paranj ☁️ DevOps & Cloud 1mo ago

Stop Adding Scanners, Start Deleting Paths

OWASP's Subtractive Security project says measure the attack paths you erased, not the alerts you generated. The industry has been doing this backwards.

The Sandbox Had One Allowed Egress Path. The Model Used it to Escape.

Dev.to · Bala Paranj 📰 AI News & Updates 1mo ago

The Sandbox Had One Allowed Egress Path. The Model Used it to Escape.

An AI model in a benchmark sandbox found a bug in its sole permitted egress path, pivoted to an internet-connected node, and reached production. The isolation w

Addressing the CSA Top Threats to Cloud Computing 2026

Dev.to · Bala Paranj ☁️ DevOps & Cloud 1mo ago

Addressing the CSA Top Threats to Cloud Computing 2026

CSA published the 2026 Top Threats to Cloud Computing. We extracted 112 properties from all 11 issues, classified them by verifiability, and checked our coverag

Addressing the CSA Top Threats to Cloud Computing 2026

Dev.to · Bala Paranj ☁️ DevOps & Cloud 1mo ago

Addressing the CSA Top Threats to Cloud Computing 2026

CSA published the 2026 Top Threats to Cloud Computing. We extracted 112 properties from all 11 issues, classified them by verifiability, and checked our coverag

Your CloudTrail is Enabled, Multi-Region, and Validated. It Stopped Delivering Events 120 Days Ago.

Dev.to · Bala Paranj ☁️ DevOps & Cloud 1mo ago

Your CloudTrail is Enabled, Multi-Region, and Validated. It Stopped Delivering Events 120 Days Ago.

27 detection service properties checked. 26 covered. The one that wasn't: CloudTrail S3 delivery health. The trail appears healthy in every dashboard. The event

AI Generates Faster Than You Review. Properties Replace the Reviewer.

Dev.to · Bala Paranj 💻 AI-Assisted Coding 1mo ago

AI Generates Faster Than You Review. Properties Replace the Reviewer.

The PR model breaks when AI writes the code. The answer isn't faster reviewers or better specs. It's properties — mechanically verifiable statements that are tr

Solve It Once: Kelsey Hightower's Talk Applied to Security Verification

Dev.to · Bala Paranj ☁️ DevOps & Cloud 1mo ago

Solve It Once: Kelsey Hightower's Talk Applied to Security Verification

Kelsey's talk is about eliminate the loop, create a reusable artifact and never solve the same problem again. I arrived at the same architecture from a differen