Archives for AWS Network Security
DNS Isolation on AWS
dns isolation aws DNS Isolation on AWS DNS isolation on AWS refers to designing your Amazon Web Services environment so that certain workloads or networks can only resolve DNS names…
AWS Security Hub versus Wiz on AWS
Capabilities AWS Security Hub CSPM Provides That Wiz Cannot 1. ➡️ Only AWS Security Hub can directly inherit & enforce Org-level guardrails. Deep Native Integration With AWS Control APIs (Preventive…
Replace DMZ with Shared VPC in AWS
AWS Firewall Manager Shared VPC Host (Public & Private Subnets) + TGW + Security VPC (GWLB); Participant Accounts place ENIs in Shared Subnets Overview This architecture uses a Shared VPC…
DMZs versus Shared VPCs
AWS Shared VPC Architecture – Segmentation by Ingress Type In an AWS Shared VPC architecture, the host account owns and manages the VPC, subnets, and routing. It shares specific…
Firewall Manager and Shared VPCs in AWS
Shared VPC Use Cases & Shared VPC vs Transit Gateway This document provides additional Shared VPC use cases for AWS Network Firewall and explains how Shared VPCs differ technically…
AWS Shared VPC vs. Transit Gateways
AWS Shared VPCs as an Alternative to Transit Gateways How Security Groups behave for resources in shared subnets (Account-level roles, cross-account references, and enforcement path). TL;DR: In a Shared…
API Gateway versus Transit Gateway
Transit Gateway vs API Gateway — and a Reference Architecture with NGINX Key Differences Aspect AWS Transit Gateway (TGW) API Gateway Primary purpose Network-level hub to connect VPCs,…
Using Cloudflare and Palo Alto Together on AWS: Pros and Cons
Using Cloudflare and Palo Alto Together on AWS ✅ Potential Benefits (Why People Do This) Cloudflare: DDoS protection, WAF, CDN, TLS offload, bot protection — global edge network. Palo Alto…
AWS DMZ Public and Private Subnets, Traffic to Internal VPC
Cloud DMZ Architecture Overview Yes, a DMZ (Demilitarized Zone) in the cloud can include both a public subnet and a private subnet. This configuration helps to separate internet-facing resources from…
Packet Capture and AWS VPC Flow Logs
Also read PCAP (Packet Capture) overview AWS VPC Flow Logs do not use PCAP (Packet Capture) format. Instead, VPC Flow Logs capture metadata about the traffic flowing to and from…