This is where I maintain a curated list of references that were useful for me in the past.

Security

CI/CD

1. GitLab Configure OpenID Connect in AWS to retrieve temporary credentials

AI/ML Security

1. OWASP AI Exchange
2. OWASP LLM Top 10

Amazon Web Services (AWS)

1. Complete AWS Security Maturity Model
2. OWASP Secrets Management on AWS
3. EKS Best Practices Guide

Google Cloud (GCP)

1. DDoS Protection and Mitigation on Google Cloud Platform
2. Google Cloud FedRAMP implementation recommendations
3. Google Cloud Security best practices center

Kubernetes

1. NSA Kubernetes Hardening Guide
2. OWASP Kubernetes Security Cheat Sheet
3. [LAB] Kubernetes Goat - An interactive Kubernetes security learning playground

Misc

1. OWASP CheatSheets
2. DevSec Hardening Framework Baselines
3. Secure Supply Chain Consumption Framework (S2C2F) Simplified Requirements