Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I’d add drift detection on everything IAM / SCP / Org to this list too.

A session token with only a few minutes validity can be enough for someone to make their access permanent.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: