AWS SCP Policy Rule Sets for Popular AWS Services
AWS SCP Policy Rule Sets for Popular AWS Services Practical Service Control Policy guardrails for AWS Regions, S3, EC2, IAM, KMS, CloudTrail, GuardDuty, AWS Config, RDS, Lambda, VPC, DynamoDB, and…
AWS Resource Control Policies: Practical RCP Rule Sets for 11 AWS Services
AWS Resource Control Policies: Practical RCP Rule Sets for 11 AWS Services AWS Resource Control Policies provide a centrally managed resource-side security boundary. This guide presents practical RCP rule sets…
AWS IAM in Detail: Users, Roles, Policies, Federation, SCPs, and Permission Boundaries
AWS IAM in Detail: Users, Roles, Policies, Federation, SCPs, and Permission Boundaries AWS Identity and Access Management (IAM) is the foundation of access control in Amazon Web Services. Almost every…
AWS API Gateway vs AWS WAF: Features, Differences and Architecture
AWS API Gateway vs AWS WAF: Features, Differences and Architecture AWS API Gateway vs. AWS WAF: What’s the Difference? AWS API Gateway and AWS WAF are both commonly found at…
ALBs with EC2 instances
<!doctype html> AWS ALB to Protect Instances with Public IPs (Elaborated) If your EC2 instances have public IPs, an AWS Application Load Balancer (ALB) can help — but the…
Shared VPCs for Production and Non Production Assets
Overview A Shared VPC lets one AWS account (the Host) own a VPC and subnets and share those subnets with other AWS accounts (the Participants). This pattern centralizes networking while…
DNS Isolation on AWS
DNS Isolation on AWS: Route 53 Resolver, DNS Firewall & Private DNS dns isolation aws DNS Isolation on AWS DNS isolation on AWS refers to designing your Amazon Web Services…
How to tell whether an endpoint is public facing?
Interpreting a JSON 404 Response Context: you received a JSON response with status: 404 detail: "no static resource /api/v2/users/myapp" Quick answer This does not prove the API endpoint is…
Control Tower Integrated SSO and Permission Sets
AWS Permission Sets vs Control Tower SSO: What's the Difference? AWS Permission Sets vs Control Tower SSO 1. AWS Control Tower SSO Purpose: Provides a managed way to centrally set…