aws
Safeguard articles tagged "aws" — guides, analysis, and best practices for software supply chain and application security.
70 articles
AWS IAM Identity Center Trusted Token Issuer: A Supply Chain Lens
Trusted Token Issuer support in IAM Identity Center lets workloads exchange OIDC tokens for AWS sessions without long-lived keys. Here is how that reshapes build pipeline trust.
AWS Service-Linked Role Abuse Techniques, 2025
Service-linked roles are the soft underbelly of AWS IAM. We catalogue the 2024-2025 abuse primitives and the detection queries that catch them.
AWS CodePipeline Supply Chain Defence 2026
AWS CodePipeline is where most AWS-native supply chain attacks land in 2026. This is the defence blueprint that actually works in production accounts.
Azure DevOps Pipeline Supply Chain Controls
Azure DevOps pipelines hold more production deploy power than any other system in many enterprises. The 2026 supply chain controls are not optional anymore.
Discover, protect and respond with AWS and Prisma Cloud
Prisma Cloud discovers, protects, and responds across AWS — but the framework starts after code is already built. Here's the AWS supply chain gap it leaves open, and how to close it.
GCP Cloud Build Supply Chain Defence
Cloud Build has the strongest native supply chain primitives of any major CI service. Most GCP shops are still not using them. This is the 2026 blueprint.
AWS ECR Image Signing With Cosign In Production
Cosign-signed images in ECR are no longer a side project. This is how to roll out signing across an AWS estate without breaking the deploy pipeline.
Azure ACR Trusted Images Policy Rollout
ACR's trusted images and notation signing combine into a deploy-time policy you can actually enforce. Here is how to roll it out without breaking AKS workloads.
GCP Binary Authorization Real-World Deployment
Binary Authorization works in production, but the rollout pattern is not obvious. This is the real-world deployment guide for 2026 GCP estates.
AWS re:Inforce 2026 Supply Chain Sessions: Field Notes
Field notes from AWS re:Inforce 2026 supply chain track: signing at scale, SBOM adoption, and the Inspector and ECR updates that actually matter.
AWS Bedrock Guardrails for Agent Workloads: A Defender's Walkthrough
Bedrock Guardrails now span prompt filtering, contextual grounding checks, and tool-use policies. We trace how they fit into a supply chain threat model for production agents.
Multi-Cloud Supply Chain Control Plane
A multi-cloud estate needs a single control plane for supply chain policy. This is what one looks like across AWS, Azure, and GCP in production in 2026.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.