Author Archives: anuj varma - Page 4
SSM Endpoints per VPC
AWS SSM VPC Endpoints Explained AWS SSM VPC Endpoints — Detailed Overview 1. Required Interface Endpoints (Per VPC) To run SSM/Session Manager in a private VPC (no Internet or NAT),…
AWS Migration Success Criteria
AWS Migration Success Criteria A concise checklist across technical, operational, and business dimensions for servers migrated to AWS. 1 Technical Success Criteria a) Functionality Validation All migrated applications…
AWS Firewall Manager
Firewall Manager in Shared VPC Environments How AWS Firewall Manager (FMS) governs centralized network and security policies in Shared VPC deployments, and which aspects of security are controlled at…
AWS Shared VPC vs. Transit Gateways
AWS Shared VPCs as an Alternative to Transit Gateways How Security Groups behave for resources in shared subnets (Account-level roles, cross-account references, and enforcement path). TL;DR: In a Shared…
AWS Backups versus 3rd party backup services
AWS Backup vs Veeam vs Clumio vs Druva — Detailed Feature Matrix AWS Backup — Pros, Cons, and Workload Coverage Pros Centralized backup management (multi-account via Organizations) with policy-based schedules,…
Dealing with Lost AWS KMS Keys
<!doctype html> Also read 'One KMS Key per application in AWS?' and Cross Account KMS Keys in AWS Q: How Do You Deal with Lost KMS Keys on…
One KMS Key per Application
<!doctype html> Also read ' Cross Account KMS Keys in AWS and Lost KMS Keys in AWS Q: One KMS Key per Application in AWS? Short answer: Yes—Especially if each…
Pen Test of public facing apps
Penetration Testing vs. Codebase Testing A typical (external) penetration test mainly targets public-facing assets such as URLs, IPs, and exposed services. To test the underlying codebase, you need different types…
EC2 Agents – URLs and IPs allowlist
EC2 Agents: CIDR vs FQDN (Wildcard) Allowlists — with Ansible & Rapid7 Examples + SG/NACL Capabilities Executive Summary CIDR allowlists control who (IPs) can talk to your instances, ideal…
AWS Application Migration Service and Block-Level Replication
🚀 AWS Application Migration Service and Block-Level Replication When organizations modernize their infrastructure or prepare for disaster recovery, they need to migrate workloads quickly, reliably, and with minimal downtime.…