Data Analytics and data Processing
Analyzing Terabytes of VPC Flow Log data – Part 1
Analyzing terabytes of VPC Flow Log data requires a robust and scalable approach to handle the large volume of data efficiently. Here are the…
Insights
Blog
Notes on secure AWS architecture: landing zones, cloud networking, identity, encryption and resilient operations.
AWS Network Security
Packet Capture and AWS VPC Flow Logs
Also read PCAP (Packet Capture) overview AWS VPC Flow Logs do not use PCAP (Packet Capture) format. Instead, VPC Flow Logs capture metadata about…
AWS Network Security
PCAP Overview
PCAP Overview PCAP (Packet Capture) files are used to record network traffic data for analysis. They capture and store data packets transmitted over a…
control tower
aws_controltower_control – terraform – preventive and detective control tower controls
There is no excerpt because this is a protected post.
EC2 Security
AWS EC2 – Proceed without Key Pair
While creating the instance , you will be prompted to “Proceed without key pair” . You can still connect to the instance provided: the sshd in…
EC2 Security
AWS Backups using SSM doc and bash
How do I kick off a command line based backup job (AWS backup job) from an SSM Doc? Create your SSM managed EC2…
S3 Security
S3 ACLs and Bucket Policies
S3 ACLs and S3 Bucket Policies ACLs were the first authorization mechanism in S3. Bucket policies are the newer method, and the method used for…
AWS IAM
AWS SSO Groups, Root Users
AWS SSO Groups and Root UsersAlso read Extending your AD to AWS and Restricted IAM Admin in AWS IAM Best Practice – Discourage use…
AWS IAM
Extending your AD to AWS – AD on EC2 Instances
Extending your AD to AWS Also read – Limited IAM Admin in AWS A very common use case – either to provide ease of…