KMS
Centralized KMS Key Management on AWS
AWS KMS CMK Centralization – Can Keys Be Stored Centrally? Short answer: No, AWS KMS keys (CMKs) cannot be physically stored in a single…
Insights
Blog
Notes on secure AWS architecture: landing zones, cloud networking, identity, encryption and resilient operations.
AWS Public APIs
How to Ensure All Client Browsers Go Through Cloudflare to Access JavaScript
How to Ensure All Client Browsers Go Through Cloudflare to Access JavaScript 1. Serve JavaScript from a Cloudflare-Proxied Domain Start by hosting your JavaScript…
AWS Public APIs
Controlling Access to Amazon Connect Chat Public API
Controlling Access to Amazon Connect Chat Public API 1. Use AWS IAM Policies (Identity and Access Management) Amazon Connect Chat APIs are often called…
AWS Network Security
Using Cloudflare and Palo Alto Together on AWS: Pros and Cons
Using Cloudflare and Palo Alto Together on AWS ✅ Potential Benefits (Why People Do This) Cloudflare: DDoS protection, WAF, CDN, TLS offload, bot protection…
AWS Network Security
AWS DMZ Public and Private Subnets, Traffic to Internal VPC
Cloud DMZ Architecture Overview Yes, a DMZ (Demilitarized Zone) in the cloud can include both a public subnet and a private subnet. This configuration…
File Servers on AWS
Large Windows File Servers transfer to AWS – Snowball versus DataSync
Large Windows Fileshare Transfers to AWS: Snowball vs DataSync For multi-terabyte Windows file shares where NTFS metadata (ownership, timestamps, DACL/SACL) must be…
AWS Migration
AWS Migration – The all important Pilot Wave (Wave zero or Wave 1)
Pilot Wave – Migration Activities for On-Premises to AWS Pilot Wave – Migration Activities for On-Premises Servers to AWS The following table outlines key…
KMS
AWS KMS CMK Centralization
AWS KMS CMK Centralization – Can Keys Be Stored Centrally? Short answer: No, AWS KMS keys (CMKs) cannot be physically stored in a single…
AWS Migration
Cutover Options for AWS Migration
AWS Migration Cutover Options AWS Migration Cutover Options 1. Traditional Network Cutover (DNS / IP / Routing Shift) This is the standard approach when…
Data Analytics and data Processing
Analyzing Terabytes of VPC Flow Log data – Part 2 – Notes from the field
First read – Analyzing Terabytes of VPC Flow Log Data – part 1 Example Workflow Ingestion and Storage: Configure VPC Flow Logs to send…