ARTICLES
Long-form writeups from real audit and remediation work: what we find in AWS accounts, why it matters, and how we fix it
13 July 2026 · 9 min read
Session Manager closes port 22 entirely: no public IPs, no bastion, no SSH keys. What startups get for free and what enterprises must add for OS-level attribution before an audit.
10 July 2026 · 5 min read
An external auditor never needs a login in your organization. A cross-account IAM role with an External ID gives temporary, read-only, fully logged API access: CloudFormation templates included for one account or a whole AWS Organization.
VAT: IT14214770969 · Via Cufra 17 · 20159 Milano - Italia · Tel: +39 3447504971 · info@upstood.com