Links:
Azure’s continuing security woes

The Meeting Owl videoconference device apparently had significant security problems 

Brandon Sherman writes about how Temporal structures its access control strategy with regard to AWS 

This week's S3 Bucket Negligence Award goes to Mobike.  
Cloud Functions or Cloud Run launched from any GCP organization can bypass Google Kubernetes Engine (GKE) Authorized Networks restrictions

Proof of someone migrating to SSO and disabling IAM users entirely. 
AWS blog post about IAM policy types: How and when to use them
Tailscale