Tag
#Cloud Security
7 articles tagged Cloud Security.
Cloud Firewall Logs Everything, Except What It Drops
Closing out ten months of testing Alibaba Cloud with the same question the series opened on: a control that stops something is not automatically a control that tells you about it.
11 Aug 2026 · 10 min read
I Gave an AI Agent Real Alibaba Cloud Credentials. Here's What It Did.
Agentic AI tools are increasingly given direct cloud access to get things done. The interesting risk isn't that they'll refuse the task. It's what they'll do in service of completing it.
9 Jun 2026 · 9 min read
Anti-DDoS Basic Is a Default, Not a Defense
Free, built-in DDoS protection sounds like a solved problem until you find the specific number where it stops being free protection and starts being a decision you need to make.
6 May 2026 · 9 min read
An OSS Bucket Set to 'Private' Isn't Always Private
Public bucket exposure is one of the oldest cloud misconfiguration classes there is. Testing it directly on OSS showed exactly how a bucket set to private can still leak individual objects.
8 Apr 2026 · 10 min read
A Security Group Is Not a Firewall, Even Though Alibaba Cloud Lets You Pretend It Is
It's tempting to treat an ECS security group as 'the firewall' for a workload. That framing quietly drops the parts of the traffic path a security group was never designed to see.
14 Jan 2026 · 10 min read
What ActionTrail Actually Records When Something Goes Wrong
Turning on ActionTrail feels like turning on visibility. It's closer to turning on one particular kind of visibility, with real gaps that only show up when you go looking for them.
10 Dec 2025 · 9 min read
RAM Policies Look Like RBAC. They Don't Behave Like It.
RAM and RBAC both use roles and policies. That surface similarity hides a structural difference that changes how a permission mistake actually plays out.
12 Nov 2025 · 9 min read