Last year, we extended our use of IAM to build and enforce role-based access control (RBAC) for our customers using AWS Security Token Service (STS), an IAM service you can use to provide temporary access to AWS resources. Along the way, we discovered a vulnerability in STS that caused role trust policy statements to be evaluated incorrectly. Learn how we discovered this vulnerability, our disclosure process with AWS, and what we learned from the experience.

This document captures the cornerstones of Stedi’s engineering culture. As a result of following the framework, product development may sometimes come to a screeching halt. The work itself may be tedious and frustrating.

The prolonged Change Healthcare outage due to a cyberattack has left thousands of healthcare providers unable to submit claims, eligibility checks, and other critical transactions to payers. The outage is expected to continue for weeks. Companies have been scrambling to implement solutions to get back online but are faced with large development efforts to switch to bespoke API formats offered by other clearinghouses.