Author | Lightnews

Ben Bridts @benbridts.be · 17d

If you are attending AWS re:Invent this year and are wondering which sessions you can still reserve a seat for now that the first rush is over; I made you a list of sessions I added to my short list that are not at capacity yet: reinvent-planner.cloud/sessions/sha...

Unofficial AWS re:Invent Session Planner 2025

Easily browse sessions, create a personalized schedule, and get recommendations to make the most of your AWS re:Invent experience.

reinvent-planner.cloud

1

Ben Bridts @benbridts.be · 18d

Time to start practicing how to say "eusc-de-east-1"

1

Ben Bridts @benbridts.be · 21d

Some quotes that could be either IT or Science:
"I don't know what this is"
"I guess we're just going to turn it off"
"We'll deal with it on Monday"

Ben Bridts @benbridts.be · 22d

Usually I'm the one called by work after hours, but today I'm watching my partner deal with "our -80 freezer is not cooling anymore" on a Friday evening.
It starts surprisingly similar to "our server is running out of disk space"... but ends with a lot more people with protective gloves in one room

1 1

Ben Bridts @benbridts.be · Sep 18

I'm biased, but +1.

Nick Frichette @frichetten.com · Sep 17

@fwdcloudsec.org Europe 2025 was incredible! Amazing talks, amazing research, and amazing people. There is no other conference I would recommend for cloud security people. Looking forward to next year!

3

Ben Bridts @benbridts.be · Aug 30

I'm on my way home from a very inspiring week!

Ross Barich @rossbarich.bsky.social · Aug 29

What an amazing week in Seattle at the AWS Heroes Summit!

Heroes- you're an inspiring group, who uplift and mentor so many in your communities, while also pushing for innovation out of AWS. Thank you for all that you do, and a special shout-out to the newest Heroes🙏👏

3

Ben Bridts @benbridts.be · Aug 22

I just witnessed this perfectly geeky exchange at work:

- I'm going to cache 404 errors for 30 seconds
- What about 418 errors?
- 3 to 4 minutes seems the most common time that people wait
- How about we follow ISO 3103 and do 6 minutes exactly?

2

Reposted by Ben Bridts

Konnor Rogers @konnorrogers.com · Jul 18

This is art:

secretgeek.github.io/html_wysiwyg...

This page is a truly naked, brutalist html quine.

secretgeek.github.io

1 18 42

Ben Bridts @benbridts.be · Jun 26

I did a fun thing and gave every Belgian access to my AWS Account (or: playing around with IAM Roles Anywhere)
cloudar.be/awsblog/sign...

Sign in with your eID: Using AWS IAM Roles Anywhere with a SmartCard Reader

Using temporary credentials to access resources, has long been a best practice and is usually straight-forward if the person or machine that is starting the action is already known in AWS (either by u...

cloudar.be

1 6

Reposted by Ben Bridts

fwd:cloudsec @fwdcloudsec.org · Jun 5

There's still time to apply for our scholarship which aims to give students or career changers a ticket and travel stipend to attend fwd:cloudsec Europe in Berlin, this September!

Details here: fwdcloudsec.org/assets/docs/...

fwdcloudsec.org

4

Ben Bridts @benbridts.be · Jun 5

AWS documentation: "just trust me, bro"
Jenkins documentation: 🚨🚨🚨

Screenshot of the AWS Documentation. Title: "Step 5. Add CSS support in a Jenkins script", explaining how to use the Jenkins Script Console to execute the command `System.setProperty("hudson.model.DirectoryBrowserSupport.CSP", "")`

Screenshot of the Jenkins documentation, titled "Implementation", that explains that setting "hudson.model.DirectoryBrowserSupport.CSP" to an empty string will cause the "content security policy" header not to be sent at all. The middle of the page has an orange warning triangle next to the text "This is potentially very unsafe and should only be used after reviewing the overall security setup."

3

Reposted by Ben Bridts

fwd:cloudsec @fwdcloudsec.org · May 7

The CFP for fwd:cloudsec Europe is now open! We're looking for practitioner-focused cloud security content, and we encourage all practitioners to submit, whatever your role or level of experience.

The CFP is open until July 11th. Read more: fwdcloudsec.org/conference/e...

CFP | EU 2025 | fwd:cloudsec

fwd:cloudsec is a non-profit conference on cloud security. At this conference you can expect discussions about all the major cloud platforms, both attack and defense research, limitations of security...

fwdcloudsec.org

5 6

Ben Bridts @benbridts.be · Apr 7

Wrong side of the country! I'm also in Romania (but much more east)

1

Ben Bridts @benbridts.be · Apr 4

Time to reset the "days since an AI-guessed configuration option blew up in someone's face" counter...

1

Ben Bridts @benbridts.be · Apr 3

I think some extra metadata, these are the sources that are used to create the SDK data files or clients from

1

Ben Bridts @benbridts.be · Apr 3

This is a very niche thing, but there is now a (not canonical) place with all the smithy models of all the AWS API supported by the AWS CLI:

github.com/aws/api-mode...

This does not include all available models, for that we still need @frichetten.com 's repo github.com/Frichetten/a...

GitHub - aws/api-models-aws

Contribute to aws/api-models-aws development by creating an account on GitHub.

github.com

1 1 2

Reposted by Ben Bridts

fwd:cloudsec @fwdcloudsec.org · Mar 24

We’re thrilled to announce that the second edition of fwd:cloudsec Europe will take place on September 15-16 in Berlin!

fwdcloudsec.org/conference/e...

fwd:cloudsec Europe 2024 | fwd:cloudsec

fwd:cloudsec is a non-profit conference on cloud security. At this conference you can expect discussions about all the major cloud platforms, both attack and defense research, limitations of security...

fwdcloudsec.org

2 6 7

Ben Bridts @benbridts.be · Mar 17

Besides hanging out on the internet, I also play in a symphonic windband. This weekend we (narrowly) placed first in the Flemish Open Windband Championship, securing a ticket to the European Championship for Wind Orchestras.
www.vrt.be/vrtnws/nl/20...

Koninklijk HarmonieOrkest Schelle wint Vlaams kampioenschap voor harmonies na ex aequo

www.vrt.be

3

Ben Bridts @benbridts.be · Mar 11

Well deserved!

1

Ben Bridts @benbridts.be · Mar 11

Are you saying that if I'm on pager duty and I want a better stack, there's another tool that will look at my monitoring data, dog?

1 1

Ben Bridts @benbridts.be · Mar 5

Does this prevent deploys if permissions are missing (in particular for CC-API resources)?
Because there are cases where the policy sim will say you don't have permissions, even though you do have them

1

Reposted by Ben Bridts

Nick Frichette @frichetten.com · Feb 24

Messages like this always warm my heart. Cloud security research is all about improving the safety and security of the platform to protect users.

4 50

Ben Bridts @benbridts.be · Feb 24

Is there anything written down about how SI deals with drift in the cloud (e.g something changes the value of an SSM:Parameter)?

Ben Bridts @benbridts.be · Feb 13

nix sometimes decide to build a bunch of things in my environment from source, so I have at least the same amount of time to come up with questions :)

2

Reposted by Ben Bridts

Werner @handle.invalid · Feb 12

Load management is all around us - from restaurants handling the lunch rush to cloud systems balancing millions of requests. Mike Haken’s latest Builders' Library article shows how the principles never change: detect early, adapt quickly, degrade gracefully. aws.amazon.com/builders-lib...

2 9 19