AWS IAM

Evidence (7)

• 5The New Stack·9/29/2026security
  Querying stale resource ownership before it becomes a security issue

  The article proposes a practical way to detect when infrastructure resource ownership has gone stale after a promotion, team change, or departure. It suggests using identity login or access logs in AWS, Microsoft Entra ID, and Google Workspace to flag owners who have been inactive for 90 days and trigger a review or reassignment process.

• 4The New Stack·9/26/2026open_source
  How open source can reduce vendor lock-in

  This article argues that vendor lock-in often grows from a series of reasonable infrastructure choices that become hard to reverse over time. It recommends evaluating the reversibility of platforms and services early, and suggests open source as one path to preserve flexibility and lower switching costs.

• 7The New Stack·9/1/2026security
  Vibe-coded apps are becoming a new form of shadow IT

  The article argues that AI-assisted internal app creation is shifting shadow IT from unauthorized SaaS usage to code and infrastructure running inside company cloud accounts. It warns that these apps can be deployed quickly with weak guardrails, creating hidden security and access risks unless organizations enforce safer defaults such as least-privilege IAM and secrets management.

• 8The New Stack·8/28/2026security
  JetBrains failed to patch exposed TeamCity server behind Cadence breach

  JetBrains says attackers exploited an unpatched TeamCity vulnerability on a Cadence cloud development server, exposing backups, credentials, logs, and some source-related data. The company advises users to rotate potentially compromised secrets and treat executions and outputs from the affected period as untrusted.

• 7The New Stack·8/19/2026security
  AWS deprecates legacy EKS auth method, but most clusters still use it

  AWS has deprecated the legacy aws-auth ConfigMap in Amazon EKS in favor of a newer API-driven access control approach. The article cites a 2025 report saying 81% of EKS clusters still run the older method, highlighting a widespread security and migration gap. It also argues that Kubernetes security is often harder than teams expect, especially at the container and cluster layers.

• 6Hugging Face Blog·7/7/2026product_launch
  Hugging Face adds one-click links to Amazon SageMaker Studio

  Hugging Face now supports deep links that send users directly from a model page into the relevant Amazon SageMaker Studio workflow. The integration preloads the selected model, provisions the needed environment, and reduces manual setup steps for customization and deployment.

• 7The New Stack·6/30/2026product_launch
  AWS makes WorkSpaces for Agents generally available

  AWS has moved Amazon WorkSpaces for Agents from preview to general availability, providing persistent cloud desktops for AI agents that need to use desktop applications. The service supports MCP-based access, identity and access management, audit logging, and human oversight for agent sessions.