service

AWS IAM: security advisories, deprecations and releases

Users, roles and permission policies for AWS accounts.

Get AWS IAM alerts Free. No account. One email, and only when something touches your stack.

What your digest would have held this week

1 item from the last 7 days. Zero sends only the ones that touch your stack.

INFO AWS What's New · 23 Oct 2026

AWS Service Reference adds global condition keys, service names, data plane classification

AWS now offers machine-readable files with all aws: global condition keys, service name mappings, and IsDataPlane flags to automate IAM policy management.
INFO AWS What's New · 3 Oct 2026

AWS IAM outbound identity federation now supports VPC endpoints for OIDC discovery

IAM outbound identity federation now supports interface VPC endpoints for OIDC discovery and JWKS verification, allowing workloads in private VPCs to retrieve verification keys without internet access.

HIGH NEW THIS WEEK Google Cloud Blog · 1 Nov 2026

Short-Lived Credentials Reduce Value of Stolen Secrets

Replace long-lived keys and service principal secrets with workload identity federation, managed identities, and temporary credentials.
INFO Datadog Security Labs · 21 Oct 2026

Introducing pathrunner: An AWS privilege escalation framework

Datadog released pathrunner, a modular offensive security framework that automates discovery and exploitation of AWS IAM privilege escalation paths.
INFO AWS Security Digest · 2 Oct 2026

AWS Security Digest #280 - Out of Context

Weekly roundup of AWS security changes: undocumented IAM condition keys, ReadOnlyAccess permission expansion, leaked-key quarantine policy clarification, plus API, policy and CVE updates.

Tell Zero what you run. You get one email, and only on the days something above applies to you.