Cloud IAM: measure blast radius, not policy count
The security of a cloud account isn't the sum of its policies; it's the reachability graph they create.
Cloud Security
Identity, blast radius, and trust boundaries in other people's computers.
Threat-modeling this garden
Eating my own dog food: a security person's website should survive its own methodology.
No notes in this bed match those filters.