AWS Network Security
Security Groups Design Patterns in AWS
Tiered Security Group Pattern for Secure AWS Architectures The Tiered Security Group Pattern: Building Intent-Based Network Boundaries in AWS Security groups are among the…
Category
Category: AWS Network Security
AWS Network Security
DNS Isolation on AWS
DNS Isolation on AWS: Route 53 Resolver, DNS Firewall & Private DNS DNS Isolation on AWS DNS isolation on AWS refers to designing your…
AWS Network Security
AWS Security Hub versus Wiz on AWS
Capabilities AWS Security Hub CSPM Provides That Wiz Cannot 1. ➡️ Only AWS Security Hub can directly inherit & enforce Org-level guardrails. Deep Native…
AWS Network Security
Replace DMZ with Shared VPC in AWS
AWS Shared VPC with Transit Gateway, GWLB & Centralized Firewall Inspection Shared VPC Host (Public & Private Subnets) + TGW + Security VPC (GWLB);…
AWS Network Security
DMZs versus Shared VPCs
AWS Shared VPC Architecture – Segmentation by Ingress Type In an AWS Shared VPC architecture, the host account owns and manages the VPC,…
AWS Firewall manager
Firewall Manager and Shared VPCs in AWS
Shared VPC Use Cases & Shared VPC vs Transit Gateway This document provides additional Shared VPC use cases for AWS Network Firewall and…
AWS Network Security
AWS Shared VPC vs. Transit Gateways
AWS Shared VPCs as an Alternative to Transit Gateways How Security Groups behave for resources in shared subnets (Account-level roles, cross-account references, and…
AWS Network Security
API Gateway versus Transit Gateway
Transit Gateway vs API Gateway — and a Reference Architecture with NGINX Key Differences Aspect AWS Transit Gateway (TGW) API Gateway Primary…
AWS Network Security
Using Cloudflare and Palo Alto Together on AWS: Pros and Cons
Using Cloudflare and Palo Alto Together on AWS ✅ Potential Benefits (Why People Do This) Cloudflare: DDoS protection, WAF, CDN, TLS offload, bot protection…
AWS Network Security
AWS DMZ Public and Private Subnets, Traffic to Internal VPC
Cloud DMZ Architecture Overview Yes, a DMZ (Demilitarized Zone) in the cloud can include both a public subnet and a private subnet. This configuration…