<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>sbldevnet</title><link>https://samuelburgos.cloud/</link><description>Recent content on sbldevnet</description><generator>Hugo</generator><language>en</language><lastBuildDate>Sun, 22 Jun 2025 16:00:00 +0000</lastBuildDate><atom:link href="https://samuelburgos.cloud/index.xml" rel="self" type="application/rss+xml"/><item><title>CLI Proxy for Cloudflare Access</title><link>https://samuelburgos.cloud/blog/202506_cloudflared_proxy/</link><pubDate>Sun, 22 Jun 2025 16:00:00 +0000</pubDate><guid>https://samuelburgos.cloud/blog/202506_cloudflared_proxy/</guid><description>&lt;h2 id="access-protected-resources-with-cloudflare-access"&gt;&#10; Access protected resources with Cloudflare Access&#10; &lt;a class="heading-link" href="#access-protected-resources-with-cloudflare-access"&gt;&#10; &lt;i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"&gt;&lt;/i&gt;&#10; &lt;span class="sr-only"&gt;Link to heading&lt;/span&gt;&#10; &lt;/a&gt;&#10;&lt;/h2&gt;&#10;&lt;p&gt;&lt;a href="https://www.cloudflare.com/products/zero-trust/access/" class="external-link" target="_blank" rel="noopener"&gt;Cloudflare Access&lt;/a&gt; is a fantastic solution within the Cloudflare Zero Trust stack. It allows you to secure access to internal applications and resources without the need for a traditional VPN. Instead, every request to an application is verified to ensure it comes from an authenticated and authorized user.&lt;/p&gt;&#10;&lt;p&gt;When you access an application protected by Cloudflare Access through a web browser, the experience is seamless. Cloudflare redirects you to your identity provider to log in. Once authenticated, a cookie is created in your browser, and you can access the application without any issues.&lt;/p&gt;</description></item><item><title>Hi!</title><link>https://samuelburgos.cloud/about/</link><pubDate>Sun, 22 Jun 2025 10:00:00 +0000</pubDate><guid>https://samuelburgos.cloud/about/</guid><description>&lt;p&gt;👋 I&amp;rsquo;m Samuel, a Telecommunications Engineer who loves networking and building things in the cloud ☁️.&lt;/p&gt;&#10;&lt;p&gt;Here I&amp;rsquo;ll share my thoughts, tools, architectures, and maybe homelab projects. A bit of everything. However, some cloud security related content will be published on &lt;a href="https://unicrons.cloud" class="external-link" target="_blank" rel="noopener"&gt;unicrons.cloud&lt;/a&gt;.&lt;/p&gt;&#10;&lt;h2 id="what-am-i-doing"&gt;&#10; What am I doing?&#10; &lt;a class="heading-link" href="#what-am-i-doing"&gt;&#10; &lt;i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"&gt;&lt;/i&gt;&#10; &lt;span class="sr-only"&gt;Link to heading&lt;/span&gt;&#10; &lt;/a&gt;&#10;&lt;/h2&gt;&#10;&lt;p&gt;Currently, I&amp;rsquo;m working as a Senior Cloud Security Engineer at Flywire.&lt;/p&gt;&#10;&lt;p&gt;I spend most of my time designing and building secure and scalable solutions, always using IaC, or creating new tools that make our lives easier.&lt;/p&gt;</description></item><item><title>Talks</title><link>https://samuelburgos.cloud/talks/</link><pubDate>Sun, 22 Jun 2025 10:00:00 +0000</pubDate><guid>https://samuelburgos.cloud/talks/</guid><description>&lt;table&gt;&#10;&#9;&lt;thead&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;th&gt;Date&lt;/th&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;th&gt;Talk&lt;/th&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;th&gt;Event&lt;/th&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&lt;/thead&gt;&#10;&#9;&lt;tbody&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;2026/09/08&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://github.com/unicrons/.github/blob/main/slides/202609_FwdCloudSecEU_AutoRemediationForTheCloudYouActuallyRun.pdf" class="external-link" target="_blank" rel="noopener"&gt;Closing the Loop: Auto-Remediation for the Cloud You Actually Run&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://fwdcloudsec.org/conference/europe/" class="external-link" target="_blank" rel="noopener"&gt;fwdCloudSec Europe 2026&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;2026/06/11&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;No Public Internet: Cross-Region &amp;amp; Cross-Account AWS PrivateLink&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://www.meetup.com/aws-valencia/events/314959653/" class="external-link" target="_blank" rel="noopener"&gt;AWS User Group Valencia&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;2026/06/04&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://github.com/unicrons/.github/blob/main/slides/202606_AWSSummit%20Madrid_BuildingSecurityAndAutoremediationInAWS.pdf" class="external-link" target="_blank" rel="noopener"&gt;Building security and auto-remediation in AWS (and beyond)&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://aws.amazon.com/es/events/summits/madrid/" class="external-link" target="_blank" rel="noopener"&gt;AWS Summit Madrid 2026&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;2026/03/11&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://github.com/unicrons/.github/blob/main/slides/Building%20Cloud%20Remediation%20for%20the%20Infrastructure%20You%20Actually%20Have%20-%20AWSCommunityDay%20Slovakia%202026.pdf" class="external-link" target="_blank" rel="noopener"&gt;Building Cloud Remediation for the Infrastructure You Actually Have&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://www.awscommunityday.sk/" class="external-link" target="_blank" rel="noopener"&gt;AWS Community Day Slovakia 2026&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;2025/10/16&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://github.com/unicrons/iam-mishaps-demo/blob/main/slides/AWSCEE_IAM_policy_mishaps.pdf" class="external-link" target="_blank" rel="noopener"&gt;IAM policy mishaps: A cautionary tale of cloud misconfigurations&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://awscommunity.eu/" class="external-link" target="_blank" rel="noopener"&gt;AWS Community Day CEE&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;2025/10/02&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://github.com/unicrons/.github/blob/main/slides/IaC%20Meets%20Reality%20-%20%40%20SANS%20CloudSecNext%202025.pdf" class="external-link" target="_blank" rel="noopener"&gt;IaC Meets Reality: Engineering for the Cloud You Actually Have&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://www.sans.org/cyber-security-training-events/cloudsecnext-summit-2025" class="external-link" target="_blank" rel="noopener"&gt;CloudSecNext @ SANS&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;2025/03/05&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://github.com/unicrons/.github/blob/main/slides/The%20journey%20to%20customized%20security%20-%20AWS%20Enterprise%20Support%20Day%20Iberia.pdf" class="external-link" target="_blank" rel="noopener"&gt;El camino hacia la seguridad personalizada: De los primeros pasos a la automatización total&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://aws-experience.com/emea/iberia/e/f374f/aws-enterprise-support-customer-community-event---barcelona" class="external-link" target="_blank" rel="noopener"&gt;AWS Enterprise Support Day Iberia&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;2024/10/19&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://github.com/unicrons/.github/blob/main/slides/Construye%20tu%20propio%20CSPM%20-%20AWS%20Community%20Day%20Spain%202024.pdf" class="external-link" target="_blank" rel="noopener"&gt;Crea tu propio CSPM con Steampipe, SecurityHub y AWS Organizations&lt;/a&gt; (&lt;a href="https://www.youtube.com/watch?v=ppPW9Eeuypk" class="external-link" target="_blank" rel="noopener"&gt;video&lt;/a&gt;)&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://2024.awscommunity.es/en/agenda" class="external-link" target="_blank" rel="noopener"&gt;AWS Community Day Spain 2024&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;2024/10/03&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://github.com/unicrons/iam-mishaps-demo/blob/main/AWSUGVLC_IAM_policy_mishaps_slides.pdf" class="external-link" target="_blank" rel="noopener"&gt;IAM policy mishaps: A cautionary tale of cloud misconfigurations&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://www.meetup.com/aws-valencia/events/303501987" class="external-link" target="_blank" rel="noopener"&gt;AWS User Group Valencia&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;2024/05/16&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;Despliega tus servicios de seguridad usando IAC directamente en tu org de AWS&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://www.meetup.com/aws-user-group-sevilla/events/300587123" class="external-link" target="_blank" rel="noopener"&gt;AWS User Group Sevilla&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;2024/01/27&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://github.com/unicrons/iam-mishaps-demo/blob/main/Sh3llcon_IAM_policy_mishaps_slides.pdf" class="external-link" target="_blank" rel="noopener"&gt;IAM policy mishaps: A cautionary tale of cloud misconfigurations&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://sh3llcon.es/programa/" class="external-link" target="_blank" rel="noopener"&gt;Sh3llcon&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&lt;/tbody&gt;&#10;&lt;/table&gt;</description></item><item><title>Tools</title><link>https://samuelburgos.cloud/tools/</link><pubDate>Sun, 22 Jun 2025 10:00:00 +0000</pubDate><guid>https://samuelburgos.cloud/tools/</guid><description>&lt;table&gt;&#10;&#9;&lt;thead&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;th&gt;Tool&lt;/th&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;th&gt;Description&lt;/th&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&lt;/thead&gt;&#10;&#9;&lt;tbody&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://github.com/sbldevnet/cloudflared-proxy" class="external-link" target="_blank" rel="noopener"&gt;cloudflared-proxy&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;A local reverse proxy that automates Cloudflare Access authentication using cloudflared, allowing unmodified tools to reach protected resources seamlessly&lt;/td&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://github.com/unicrons/aws-root-manager" class="external-link" target="_blank" rel="noopener"&gt;aws-root-manager&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;A CLI tool for managing AWS Centralized Root Access&lt;/td&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://github.com/unicrons/steampipe-config-generator" class="external-link" target="_blank" rel="noopener"&gt;steampipe-config-generator&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;Generate Steampipe AWS config files for an AWS Organization&lt;/td&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://github.com/unicrons/powerpipe-securityhub-importer" class="external-link" target="_blank" rel="noopener"&gt;powerpipe-securityhub-importer&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;Import your Powerpipe findings into AWS SecurityHub&lt;/td&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&#9;&#9;&lt;tr&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;&lt;a href="https://github.com/unicrons/terraform-aws-organization-iam-role" class="external-link" target="_blank" rel="noopener"&gt;terraform-aws-organization-iam-role&lt;/a&gt;&lt;/td&gt;&#10;&#9;&#9;&#9;&#9;&#9;&lt;td&gt;Terraform module to create an AWS IAM Role across all your Organization accounts&lt;/td&gt;&#10;&#9;&#9;&#9;&lt;/tr&gt;&#10;&#9;&lt;/tbody&gt;&#10;&lt;/table&gt;</description></item><item><title>aws-root-manager: Manage AWS root access in your organization</title><link>https://samuelburgos.cloud/blog/202503_aws_root_manager/</link><pubDate>Fri, 21 Mar 2025 12:00:00 +0000</pubDate><guid>https://samuelburgos.cloud/blog/202503_aws_root_manager/</guid><description>&lt;p&gt;I originally published this on &lt;a href="https://unicrons.cloud" class="external-link" target="_blank" rel="noopener"&gt;unicrons.cloud&lt;/a&gt;.&lt;/p&gt;&#10;&lt;p&gt;&lt;a href="https://unicrons.cloud/en/2025/03/21/aws-root-manager-a-tool-to-manage-root-access-in-your-aws-organization/" class="external-link" target="_blank" rel="noopener"&gt;Read the full post there&lt;/a&gt;.&lt;/p&gt;</description></item><item><title>IAM policy mishaps: Case 2 - SNS</title><link>https://samuelburgos.cloud/blog/202502_iam_mishaps_case2_sns/</link><pubDate>Fri, 21 Feb 2025 12:00:00 +0000</pubDate><guid>https://samuelburgos.cloud/blog/202502_iam_mishaps_case2_sns/</guid><description>&lt;p&gt;I originally published this on &lt;a href="https://unicrons.cloud" class="external-link" target="_blank" rel="noopener"&gt;unicrons.cloud&lt;/a&gt;.&lt;/p&gt;&#10;&lt;p&gt;&lt;a href="https://unicrons.cloud/en/2025/02/21/iam-policy-mishaps-case-2---sns/" class="external-link" target="_blank" rel="noopener"&gt;Read the full post there&lt;/a&gt;.&lt;/p&gt;</description></item><item><title>Automate your Steampipe AWS configuration with AWS Organizations</title><link>https://samuelburgos.cloud/blog/202410_steampipe_config_generator/</link><pubDate>Fri, 18 Oct 2024 13:00:00 +0000</pubDate><guid>https://samuelburgos.cloud/blog/202410_steampipe_config_generator/</guid><description>&lt;p&gt;I originally published this on &lt;a href="https://unicrons.cloud" class="external-link" target="_blank" rel="noopener"&gt;unicrons.cloud&lt;/a&gt;.&lt;/p&gt;&#10;&lt;p&gt;&lt;a href="https://unicrons.cloud/en/2024/10/18/automate-your-steampipe-aws-configuration-with-aws-organizations/" class="external-link" target="_blank" rel="noopener"&gt;Read the full post there&lt;/a&gt;.&lt;/p&gt;</description></item><item><title>Import your Powerpipe results into AWS SecurityHub</title><link>https://samuelburgos.cloud/blog/202410_powerpipe_securityhub_importer/</link><pubDate>Fri, 18 Oct 2024 12:00:00 +0000</pubDate><guid>https://samuelburgos.cloud/blog/202410_powerpipe_securityhub_importer/</guid><description>&lt;p&gt;I originally published this on &lt;a href="https://unicrons.cloud" class="external-link" target="_blank" rel="noopener"&gt;unicrons.cloud&lt;/a&gt;.&lt;/p&gt;&#10;&lt;p&gt;&lt;a href="https://unicrons.cloud/en/2024/10/18/import-your-powerpipe-results-into-aws-securityhub/" class="external-link" target="_blank" rel="noopener"&gt;Read the full post there&lt;/a&gt;.&lt;/p&gt;</description></item><item><title>Deploy IAM Roles across an AWS Organization as code</title><link>https://samuelburgos.cloud/blog/202410_deploy_iam_roles_as_code/</link><pubDate>Mon, 14 Oct 2024 12:00:00 +0000</pubDate><guid>https://samuelburgos.cloud/blog/202410_deploy_iam_roles_as_code/</guid><description>&lt;p&gt;I originally published this on &lt;a href="https://unicrons.cloud" class="external-link" target="_blank" rel="noopener"&gt;unicrons.cloud&lt;/a&gt;.&lt;/p&gt;&#10;&lt;p&gt;&lt;a href="https://unicrons.cloud/en/2024/10/14/deploy-iam-roles-across-an-aws-organization-as-code/" class="external-link" target="_blank" rel="noopener"&gt;Read the full post there&lt;/a&gt;.&lt;/p&gt;</description></item><item><title>IAM policy mishaps: Case 1 - S3</title><link>https://samuelburgos.cloud/blog/202406_iam_mishaps_case1_s3/</link><pubDate>Sat, 01 Jun 2024 12:00:00 +0000</pubDate><guid>https://samuelburgos.cloud/blog/202406_iam_mishaps_case1_s3/</guid><description>&lt;p&gt;I originally published this on &lt;a href="https://unicrons.cloud" class="external-link" target="_blank" rel="noopener"&gt;unicrons.cloud&lt;/a&gt;.&lt;/p&gt;&#10;&lt;p&gt;&lt;a href="https://unicrons.cloud/en/2024/06/01/iam-policy-mishaps-case-1---s3/" class="external-link" target="_blank" rel="noopener"&gt;Read the full post there&lt;/a&gt;.&lt;/p&gt;</description></item><item><title>IAM policy mishaps: Intro to IAM</title><link>https://samuelburgos.cloud/blog/202402_iam_mishaps_intro/</link><pubDate>Tue, 20 Feb 2024 12:00:00 +0000</pubDate><guid>https://samuelburgos.cloud/blog/202402_iam_mishaps_intro/</guid><description>&lt;p&gt;I originally published this on &lt;a href="https://unicrons.cloud" class="external-link" target="_blank" rel="noopener"&gt;unicrons.cloud&lt;/a&gt;.&lt;/p&gt;&#10;&lt;p&gt;&lt;a href="https://unicrons.cloud/en/2024/02/20/iam-policy-mishaps-intro-to-iam/" class="external-link" target="_blank" rel="noopener"&gt;Read the full post there&lt;/a&gt;.&lt;/p&gt;</description></item></channel></rss>