AWS Network Security
Security Groups Design Patterns in AWS
Tiered Security Group Pattern for Secure AWS Architectures The Tiered Security Group Pattern: Building Intent-Based Network Boundaries in AWS Security groups are among the…
Insights
Blog
Notes on secure AWS architecture: landing zones, cloud networking, identity, encryption and resilient operations.
AWS Security and Governance
AWS SCP Policy Rule Sets for Popular AWS Services
AWS SCP Policy Rule Sets for Popular AWS Services Practical Service Control Policy guardrails for AWS Regions, S3, EC2, IAM, KMS, CloudTrail, GuardDuty, AWS…
AWS Security and Governance
AWS Resource Control Policies: Practical RCP Rule Sets for 11 AWS Services
AWS Resource Control Policies: Practical RCP Rule Sets for 11 AWS Services AWS Resource Control Policies provide a centrally managed resource-side security boundary. This…
AWS IAM
AWS IAM in Detail: Users, Roles, Policies, Federation, SCPs, and Permission Boundaries
AWS IAM in Detail: Users, Roles, Policies, Federation, SCPs, and Permission Boundaries AWS Identity and Access Management (IAM) is the foundation of access control…
APIs on AWS
Building an AI-Powered Fraud Detection System on AWS Modern fraud detection should no longer be viewed as a single machine-learning model that returns a…
APIs on AWS
AWS API Gateway vs AWS WAF: Features, Differences and Architecture
AWS API Gateway vs AWS WAF: Features, Differences and Architecture AWS API Gateway vs. AWS WAF: What’s the Difference? AWS API Gateway and AWS…
ALBs on AWS
ALBs with EC2 instances
<!doctype html> AWS ALB to Protect Instances with Public IPs (Elaborated) If your EC2 instances have public IPs, an AWS Application Load Balancer…
Shared VPCs
Shared VPCs for Production and Non Production Assets
Overview A Shared VPC lets one AWS account (the Host) own a VPC and subnets and share those subnets with other AWS accounts (the…
AWS Network Security
DNS Isolation on AWS
DNS Isolation on AWS: Route 53 Resolver, DNS Firewall & Private DNS DNS Isolation on AWS DNS isolation on AWS refers to designing your…
APIs on AWS
How to tell whether an endpoint is public facing?
Interpreting a JSON 404 Response Context: you received a JSON response with status: 404 detail: "no static resource /api/v2/users/myapp" Quick answer This does…