Leverage Runtime Data to Govern Kafka and ElastiCache Communication

Denise Ashur December 18, 2023

Leverage Runtime Data to Govern Kafka and ElastiCache Communication

We are excited to announce that Upwind has now added enrichment to managed streaming service Kafka and ElastiCache in our context-rich topology map.

This new capability leverages runtime data, allowing you to govern your database network access through the Upwind platform. This builds on top of Upwind’s existing RDS cluster and Google Cloud SQL enrichment, letting you view the specific databases that your resources are communicating with and visualize DNS communication in real-time on the topology map and in connections insights.

Use this new capability to get even more visibility of your Kafka and ElastiCache and receive even deeper insights into your resource communication and behavior.

Contents

Kubernetes environments move fast. Workloads appear and disappear, container images change continuously, services are exposed, permissions evolve, and development teams deploy updates throughout the day. But most cloud security platforms force practitioners to investigate Kubernetes risk through interfaces designed for the broader cloud, leaving teams to manually filter the noise before they can begin investigating…

Revolutionizing Security Investigations with the Upwind MCP Server

<br />
<b>Warning</b>: Undefined variable $photo in <b>/nas/content/live/landing173/wp-content/themes/bricks/includes/elements/code.php(236) : eval()'d code</b> on line <b>24</b><br />
<br />
<b>Warning</b>: Trying to access array offset on value of type null in <b>/nas/content/live/landing173/wp-content/themes/bricks/includes/elements/code.php(236) : eval()'d code</b> on line <b>24</b><br />

Guy Gilad

Frontier AI models combined with a rampant rate of new critical vulnerabilities mean speed and context are everything. When a critical production service starts behaving suspiciously, every second spent jumping between different tools and dashboards is a second lost to a potential attacker. At Upwind, we are excited to introduce a game-changer for security teams:…

No npm Token Required: Inside the AsyncAPI Supply Chain Attack

Daniel Danziger, Lidor Machluf

Executive Summary Upwind identified a critical supply chain compromise across five npm packages in the @asyncapi scope, published on July 14, 2026 via two separate branch compromises in two GitHub repositories. The attacker never touched an npm token. They abused each project's own CI pipeline through GitHub Actions OIDC to publish the malicious packages. The…

Leverage Runtime Data to Govern Kafka and ElastiCache Communication

Leverage Runtime Data to Govern Kafka and ElastiCache Communication

Further Reading

Complete KSPM: From Pull Request to Production Runtime

Revolutionizing Security Investigations with the Upwind MCP Server

No npm Token Required: Inside the AsyncAPI Supply Chain Attack