PaaS Security
Accessing PaaS Services on AWS via Endpoints
Also read, which PaaS services require VPCs Accessing PaaS Services on AWS AWS services like EC2, RDS, and ElastiCache come with an Elastic Network…
Insights
Blog
Notes on secure AWS architecture: landing zones, cloud networking, identity, encryption and resilient operations.
AWS IAM
Limited IAM Admin in AWS
Often, we need to pare down the credentials of an IAM admin. This can be accomplished by creating a custom IAM policy for the…
AWS Network Security
Testing your VPN Tunnel in AWS
VPN TUNNEL in AWS The idea is for all your private subnets to route via the VPN Tunnel. Create a custom route table shown…
EC2 Security
AWS SSM Connect for no ingress EC2 instances
No Ingress EC2 is a great security option to completely block off all access to an EC2 instance. How then, will management users connect…
AWS Network Security
AWS DDOS Protection
AWS Shield A managed Distributed Denial of Service (DDoS) protection service. It detects and automatically mitigates attacks that could potentially result in downtime for your…
EC2 Security
Protecting EC2 instances on AWS – Basic EC2 Security
Also read – No Ingress EC2 Instances Here are a couple of simple, yet often ignored, best practices around EC2 instance access. Access to…
AWS Network Security
Routes in AWS – Destinations and Targets
Also read – Palo Alto East West and Ingress Egress Filtering – on GCP and AWS Routes in AWS Overview – Destinations versus Targets…
PaaS Security
AWS – Which PaaS services require a VPC?
Several PaaS services use the compute platform (compute engine on GCP and EC2 on AWS). These services ARE actually part of your VPC –…
AWS IAM
AWS SSO Groups and Root Users
How do SSO groups work in an AWS organization? How do you restrict root users at lower levels in an organization? AWS SSO Groups…
Risk Factors
AWS Risk Factors – Some Common AWS Risks
Also read – Google Cloud Security Audit Amazon Web Services is leading the public cloud space with an ever increasing list of service offerings.…