Identity Is the Perimeter
Marcus Delacroix
A red teamer's account of how cloud environments actually get compromised — and the IAM design that would have stopped it.
Reading track
Identity, networking, and observability together — the three things an attacker uses and a defender needs.
Three titles, $172 separately — $149 together. You save $23. Every title is delivered DRM-free in PDF and EPUB, and updates to a new edition are included.
Three complete titles. Each one is also sold separately, at the price shown, if you only need part of the track.
Marcus Delacroix
A red teamer's account of how cloud environments actually get compromised — and the IAM design that would have stopped it.
Tomás Brenner
VPCs, peering, transit, private connectivity, and hybrid DNS — explained by someone who has debugged all of them at 2 a.m.
Sam Okonkwo
How to instrument a cloud system so that during an incident the data answers your question instead of describing your dashboards.
Our editors sequenced this track. You can read it in any order you like, but this is the path where each title pays for the next.
Advanced · Multi-cloud · 428 pages
The thesis first: in a cloud control plane, identity is the boundary an attacker actually crosses. Everything after this is defense in depth behind that claim.
Practitioner · Multi-cloud · 356 pages
The network is the second half of the story. Route evaluation and private connectivity are what stop one compromised principal from reaching everything else.
Practitioner · Multi-cloud · 322 pages
Detection last, because you can only alert on what you have already modeled. Symptom-based alerting turns the two titles above into evidence you can act on.