Richard Fan
@richardfan.xyz
AWS Security Hero | Security Engineer | OSCP
This is my most favourite announcement so far: #AWS issued-JWT
🔗 docs.aws.amazon.com/IAM/latest/U...
With sts:GetWebIdentityToken, we can now request JWT from AWS, with context inside that can be logged by external service.
#AWSCloud #Security #CloudSecurity #CloudSecurity #IAM #OIDC
🔗 docs.aws.amazon.com/IAM/latest/U...
With sts:GetWebIdentityToken, we can now request JWT from AWS, with context inside that can be logged by external service.
#AWSCloud #Security #CloudSecurity #CloudSecurity #IAM #OIDC
November 20, 2025 at 2:54 AM
This is my most favourite announcement so far: #AWS issued-JWT
🔗 docs.aws.amazon.com/IAM/latest/U...
With sts:GetWebIdentityToken, we can now request JWT from AWS, with context inside that can be logged by external service.
#AWSCloud #Security #CloudSecurity #CloudSecurity #IAM #OIDC
🔗 docs.aws.amazon.com/IAM/latest/U...
With sts:GetWebIdentityToken, we can now request JWT from AWS, with context inside that can be logged by external service.
#AWSCloud #Security #CloudSecurity #CloudSecurity #IAM #OIDC
Can anyone tell me what is the difference between this M365 Copilot app and the Excel app?
If the Copilot app have all the full Word, Excel and Powerpoint feature, then why I need to install 3 more apps?
#Microsoft #MicrosoftOffice #MicrosoftM365 #M365 #Copilot #MicrosoftCopilot
If the Copilot app have all the full Word, Excel and Powerpoint feature, then why I need to install 3 more apps?
#Microsoft #MicrosoftOffice #MicrosoftM365 #M365 #Copilot #MicrosoftCopilot
October 27, 2025 at 6:24 AM
Can anyone tell me what is the difference between this M365 Copilot app and the Excel app?
If the Copilot app have all the full Word, Excel and Powerpoint feature, then why I need to install 3 more apps?
#Microsoft #MicrosoftOffice #MicrosoftM365 #M365 #Copilot #MicrosoftCopilot
If the Copilot app have all the full Word, Excel and Powerpoint feature, then why I need to install 3 more apps?
#Microsoft #MicrosoftOffice #MicrosoftM365 #M365 #Copilot #MicrosoftCopilot
Totally worth a trip to #AWSCommunityDay #Warsaw
What a massive and successful community day
#aws #awscloud #awscommunity #networking #tech
What a massive and successful community day
#aws #awscloud #awscommunity #networking #tech
September 18, 2025 at 6:44 PM
Totally worth a trip to #AWSCommunityDay #Warsaw
What a massive and successful community day
#aws #awscloud #awscommunity #networking #tech
What a massive and successful community day
#aws #awscloud #awscommunity #networking #tech
September 18, 2025 at 5:41 AM
#fwdcloudsec EU is happening soon
Can’t make it? No worry
📹 Livestream is also available on YouTube: fwdcloudsec.org/conference/e...
#cybersecurity #security #cloudsecurity
Can’t make it? No worry
📹 Livestream is also available on YouTube: fwdcloudsec.org/conference/e...
#cybersecurity #security #cloudsecurity
September 15, 2025 at 6:39 AM
#fwdcloudsec EU is happening soon
Can’t make it? No worry
📹 Livestream is also available on YouTube: fwdcloudsec.org/conference/e...
#cybersecurity #security #cloudsecurity
Can’t make it? No worry
📹 Livestream is also available on YouTube: fwdcloudsec.org/conference/e...
#cybersecurity #security #cloudsecurity
After 14 hours of flight, finally arrived in Berlin,
What brings me here?
It’s #fwdcloudsec, a conference I always learn a lot from cloud security all-stars
Can’t make it? No worry
📹 Livestream is also available on YouTube: fwdcloudsec.org/conference/e...
#cybersecurity #security #cloudsecurity
What brings me here?
It’s #fwdcloudsec, a conference I always learn a lot from cloud security all-stars
Can’t make it? No worry
📹 Livestream is also available on YouTube: fwdcloudsec.org/conference/e...
#cybersecurity #security #cloudsecurity
September 13, 2025 at 4:17 PM
After 14 hours of flight, finally arrived in Berlin,
What brings me here?
It’s #fwdcloudsec, a conference I always learn a lot from cloud security all-stars
Can’t make it? No worry
📹 Livestream is also available on YouTube: fwdcloudsec.org/conference/e...
#cybersecurity #security #cloudsecurity
What brings me here?
It’s #fwdcloudsec, a conference I always learn a lot from cloud security all-stars
Can’t make it? No worry
📹 Livestream is also available on YouTube: fwdcloudsec.org/conference/e...
#cybersecurity #security #cloudsecurity
If you created a new #AWS account with #FreeTier
DO NOT follow the console recommendation to create IAM Identity Center with AWS Organization, it will EXPIRE all your free credit ❗❗❗
If you want to use IAM Identity Center, create it on account instance!
#AWSCloud #CostOptimization #AWSFreeTier
DO NOT follow the console recommendation to create IAM Identity Center with AWS Organization, it will EXPIRE all your free credit ❗❗❗
If you want to use IAM Identity Center, create it on account instance!
#AWSCloud #CostOptimization #AWSFreeTier
August 2, 2025 at 3:03 PM
If you created a new #AWS account with #FreeTier
DO NOT follow the console recommendation to create IAM Identity Center with AWS Organization, it will EXPIRE all your free credit ❗❗❗
If you want to use IAM Identity Center, create it on account instance!
#AWSCloud #CostOptimization #AWSFreeTier
DO NOT follow the console recommendation to create IAM Identity Center with AWS Organization, it will EXPIRE all your free credit ❗❗❗
If you want to use IAM Identity Center, create it on account instance!
#AWSCloud #CostOptimization #AWSFreeTier
TIL, you only need write access on a #GitHub repo to manage variables and secrets, even under environment. No admin access required🫨
It's just that it can't be accessed via UI, you need to use API or gh cli
cli.github.com/manual/gh_va...
cli.github.com/manual/gh_se...
#devops #cicd #githubactions
It's just that it can't be accessed via UI, you need to use API or gh cli
cli.github.com/manual/gh_va...
cli.github.com/manual/gh_se...
#devops #cicd #githubactions
July 23, 2025 at 1:27 PM
TIL, you only need write access on a #GitHub repo to manage variables and secrets, even under environment. No admin access required🫨
It's just that it can't be accessed via UI, you need to use API or gh cli
cli.github.com/manual/gh_va...
cli.github.com/manual/gh_se...
#devops #cicd #githubactions
It's just that it can't be accessed via UI, you need to use API or gh cli
cli.github.com/manual/gh_va...
cli.github.com/manual/gh_se...
#devops #cicd #githubactions
I saw this debate on an Instagram post: www.instagram.com/reel/DI6SN7k...
Here's my solution, simple and clear
Why Americans love writing essay on traffic signs?
#RoadDesign #HighwayDesign #RoadSafety #SignDesign #RoadSign #TrafficSign
Here's my solution, simple and clear
Why Americans love writing essay on traffic signs?
#RoadDesign #HighwayDesign #RoadSafety #SignDesign #RoadSign #TrafficSign
June 30, 2025 at 7:13 AM
I saw this debate on an Instagram post: www.instagram.com/reel/DI6SN7k...
Here's my solution, simple and clear
Why Americans love writing essay on traffic signs?
#RoadDesign #HighwayDesign #RoadSafety #SignDesign #RoadSign #TrafficSign
Here's my solution, simple and clear
Why Americans love writing essay on traffic signs?
#RoadDesign #HighwayDesign #RoadSafety #SignDesign #RoadSign #TrafficSign
June 9, 2025 at 10:25 AM
Why is #terraform #aws provider documentation showing warning of "5.99.1 not the latest version" instead of "6.0.0-beta2 is a beta version"?
I thought people expect the latest stable version as the default instead of a beta one
I thought people expect the latest stable version as the default instead of a beta one
June 3, 2025 at 5:57 AM
Why is #terraform #aws provider documentation showing warning of "5.99.1 not the latest version" instead of "6.0.0-beta2 is a beta version"?
I thought people expect the latest stable version as the default instead of a beta one
I thought people expect the latest stable version as the default instead of a beta one
I was about to report bug, thinking CloudTrail is exposing sensitive information
Turned out, it's just another form of "HIDDEN_DUE_TO_SECURITY_REASONS"
How many other forms do AWS uses??? 😆
#AWS #CloudTrail #CloudSecurity
Turned out, it's just another form of "HIDDEN_DUE_TO_SECURITY_REASONS"
How many other forms do AWS uses??? 😆
#AWS #CloudTrail #CloudSecurity
February 4, 2025 at 7:34 AM
I was about to report bug, thinking CloudTrail is exposing sensitive information
Turned out, it's just another form of "HIDDEN_DUE_TO_SECURITY_REASONS"
How many other forms do AWS uses??? 😆
#AWS #CloudTrail #CloudSecurity
Turned out, it's just another form of "HIDDEN_DUE_TO_SECURITY_REASONS"
How many other forms do AWS uses??? 😆
#AWS #CloudTrail #CloudSecurity
Have spent 8 days on flights this year
December 31, 2024 at 10:28 AM
Have spent 8 days on flights this year
As always, I visited #serverlesspresso last week in #AWSreInvent2024
➡️ Checkout how it works behind the scene: serverlessland.com/reinvent2022...
#AWSreInvent #AWS #AWSCloud #serverless
➡️ Checkout how it works behind the scene: serverlessland.com/reinvent2022...
#AWSreInvent #AWS #AWSCloud #serverless
December 12, 2024 at 4:41 PM
As always, I visited #serverlesspresso last week in #AWSreInvent2024
➡️ Checkout how it works behind the scene: serverlessland.com/reinvent2022...
#AWSreInvent #AWS #AWSCloud #serverless
➡️ Checkout how it works behind the scene: serverlessland.com/reinvent2022...
#AWSreInvent #AWS #AWSCloud #serverless
2 of the Europe cities I visited this year
Why didn’t it happen earlier? 😆
Why didn’t it happen earlier? 😆
December 11, 2024 at 5:51 AM
2 of the Europe cities I visited this year
Why didn’t it happen earlier? 😆
Why didn’t it happen earlier? 😆
Last week was an exhausting #AWSreInvent week (both mentally and physically)
I attended 0 sessions this year, but having some much fun meeting new and old friends!!!
Now, I need to do editing for my videos
#AWS #AWSCloud #AWSreInvent2024 #AWSCommunity #preinventhike
I attended 0 sessions this year, but having some much fun meeting new and old friends!!!
Now, I need to do editing for my videos
#AWS #AWSCloud #AWSreInvent2024 #AWSCommunity #preinventhike
December 9, 2024 at 9:10 AM
Last week was an exhausting #AWSreInvent week (both mentally and physically)
I attended 0 sessions this year, but having some much fun meeting new and old friends!!!
Now, I need to do editing for my videos
#AWS #AWSCloud #AWSreInvent2024 #AWSCommunity #preinventhike
I attended 0 sessions this year, but having some much fun meeting new and old friends!!!
Now, I need to do editing for my videos
#AWS #AWSCloud #AWSreInvent2024 #AWSCommunity #preinventhike
Time in distributed systems was impossible
But with precise clock, those compexity can be reduced
#AWSreInvent #AWS #AWSreInvent2024 #AWSCloud
But with precise clock, those compexity can be reduced
#AWSreInvent #AWS #AWSreInvent2024 #AWSCloud
December 5, 2024 at 6:21 PM
Time in distributed systems was impossible
But with precise clock, those compexity can be reduced
#AWSreInvent #AWS #AWSreInvent2024 #AWSCloud
But with precise clock, those compexity can be reduced
#AWSreInvent #AWS #AWSreInvent2024 #AWSCloud
December 5, 2024 at 5:39 PM
By the time you know your system is complex, it’s already too late.
“Do not ignore the warning signs”
#AWSreInvent #AWS #AWSreInvent2024 #AWSCloud
“Do not ignore the warning signs”
#AWSreInvent #AWS #AWSreInvent2024 #AWSCloud
December 5, 2024 at 5:17 PM
By the time you know your system is complex, it’s already too late.
“Do not ignore the warning signs”
#AWSreInvent #AWS #AWSreInvent2024 #AWSCloud
“Do not ignore the warning signs”
#AWSreInvent #AWS #AWSreInvent2024 #AWSCloud
December 5, 2024 at 5:10 PM
"Complexity can neither be created nor destroyed only moved somewhere else"
#AWSreInvent #AWS #AWSreInvent2024 #AWSCloud
#AWSreInvent #AWS #AWSreInvent2024 #AWSCloud
December 5, 2024 at 4:50 PM
"Complexity can neither be created nor destroyed only moved somewhere else"
#AWSreInvent #AWS #AWSreInvent2024 #AWSCloud
#AWSreInvent #AWS #AWSreInvent2024 #AWSCloud
December 5, 2024 at 4:40 PM