Published on the AWS Security Blog: Automating IAM Remediation
Co-authored a solution for closing IAM Access Analyzer findings automatically — routing each one to a pull request, an issue, or a controlled decommission based on how the role was created.
Published on the AWS Security Blog: Subdomain Takeover
Co-authored a deep dive on subdomain takeover with the AWS CIRT team — dangling DNS records, how attackers exploit them, and how to detect it before they do.