Blog

trueno blog AWS cloud intelligence notes.

Practical writing on AWS security, cost, IAM, and posture management, plus the engineering decisions behind trueno. Technical, specific, and honest about the tradeoffs.

July 11, 20269 min read
Why Your AWS Security Tool Should Use Read-Only AssumeRole, Not Access Keys
Long-lived access keys are the wrong default for a product that connects to production. Here is why read-only STS AssumeRole, external ID protection, and metadata-only scanning are the minimum trust model for an AWS posture tool.
AWS securityIAMPosture management

trueno blog AWS cloud intelligence notes.

Why Your AWS Security Tool Should Use Read-Only AssumeRole, Not Access Keys