Terraform State Security: Redaction Is Not Secret Removal
Protect Terraform state and saved plans, distinguish redaction from omission, and verify provider support for ephemeral and write-only values.
Hackbitez journal
Tag: Cloud security
S3 Block Public Access: Evaluate the Settings That Actually Apply
Understand S3 public-access guardrails, inherited settings, existing grants, and cross-account effects before testing permitted and denied requests.
Kubernetes RBAC: Review Hidden Privileges Before Granting Access
Review namespace scope, Secret reads, workload creation, wildcards, and delegation before granting Kubernetes access.