# AWS

> Practical advice for staying secure as the threat landscape shifts.

- [Find PII Risk in Your S3 Buckets](https://threat-intelligence.anth.us/aws/find-pii-risk-in-s3-buckets/index.md): Which S3 buckets hold PII, and which of those can actually be reached? The overlap is where the work is. (2026-07-04)
- [Build the AWS Findings Pipeline](https://threat-intelligence.anth.us/aws/build-the-aws-exposure-control-stack/index.md): Detection is the easy half. A findings pipeline routes signals into ownership, escalation, and closure — so exposure actually goes down. (2026-07-04)
- [Turn AWS Findings Into an Exposure Queue](https://threat-intelligence.anth.us/aws/audit-aws-exposure-before-attackers-do/index.md): AWS risk rarely arrives as one finding. It shows up when identity, data, key policy, and logging gaps line up across accounts — and the work is to see the line-up first. (2026-07-04)