Josiah Bruner
@josiahbruner.com
Security engineer at jellyfish.co. Co-founder of riskytrees.com.
aka @JosiahBruner@ioc.exchange
aka @JosiahBruner@ioc.exchange
I've gotten so sick of debugging slightly invalid IAM policies in terraform code that I decided to write a provider that lets you automatically validate policies at planning time using AWS IAM policy validation APIs.
If this sounds interesting, check out: registry.terraform.io/providers/Jo...
If this sounds interesting, check out: registry.terraform.io/providers/Jo...
Terraform Registry
registry.terraform.io
September 6, 2025 at 3:49 PM
I've gotten so sick of debugging slightly invalid IAM policies in terraform code that I decided to write a provider that lets you automatically validate policies at planning time using AWS IAM policy validation APIs.
If this sounds interesting, check out: registry.terraform.io/providers/Jo...
If this sounds interesting, check out: registry.terraform.io/providers/Jo...
I decided to articulate some thoughts on where I think security engineering needs some maturing, after finally hitting a decade in the software industry: riskytrees.com/blog/when-security-engineering-is-neither-security-nor-engineering.
When Security Engineering is Neither Security, nor Engineering — RiskyTrees
Welcome, dear reader, to the first – and perhaps last – opinion-style blog post I will ever write. This post is intended for folks who take an interest in the security industry (which I’ve now been i...
riskytrees.com
June 11, 2025 at 8:47 PM
I decided to articulate some thoughts on where I think security engineering needs some maturing, after finally hitting a decade in the software industry: riskytrees.com/blog/when-security-engineering-is-neither-security-nor-engineering.
Reposted by Josiah Bruner
EFF Statement on U.S. Supreme Court's Decision to Uphold TikTok Ban:
January 17, 2025 at 4:01 PM
EFF Statement on U.S. Supreme Court's Decision to Uphold TikTok Ban:
I had the privilege of working with Jellyfish's wonderful IT team to build a pretty slick approach for just-in-time, capability-based IAM access control scheme in AWS. If you're curious what that means or how it works, check out our blog post: jellyfish.co/blog/are-you...
“Are you still eating that?” (Access Control at Jellyfish) | Jellyfish Blog
Our customer’s security is paramount. Learn about Jellyfish's defences in our AWS environment and how we keep our customer data safe.
jellyfish.co
March 16, 2024 at 12:21 PM
I had the privilege of working with Jellyfish's wonderful IT team to build a pretty slick approach for just-in-time, capability-based IAM access control scheme in AWS. If you're curious what that means or how it works, check out our blog post: jellyfish.co/blog/are-you...