Centralized KMS Key Management on AWS
AWS KMS CMK Centralization – Can Keys Be Stored Centrally? Short answer: No, AWS KMS keys (CMKs) cannot be physically stored in a single central account for all workloads to…
How to Ensure All Client Browsers Go Through Cloudflare to Access JavaScript
How to Ensure All Client Browsers Go Through Cloudflare to Access JavaScript 1. Serve JavaScript from a Cloudflare-Proxied Domain Start by hosting your JavaScript file behind a custom domain, such…
Controlling Access to Amazon Connect Chat Public API
Controlling Access to Amazon Connect Chat Public API 1. Use AWS IAM Policies (Identity and Access Management) Amazon Connect Chat APIs are often called from client applications using AWS credentials…
Using Cloudflare and Palo Alto Together on AWS: Pros and Cons
Using Cloudflare and Palo Alto Together on AWS ✅ Potential Benefits (Why People Do This) Cloudflare: DDoS protection, WAF, CDN, TLS offload, bot protection — global edge network. Palo Alto…
AWS DMZ Public and Private Subnets, Traffic to Internal VPC
Cloud DMZ Architecture Overview Yes, a DMZ (Demilitarized Zone) in the cloud can include both a public subnet and a private subnet. This configuration helps to separate internet-facing resources from…
Large Windows File Servers transfer to AWS – Snowball versus DataSync
Large Windows Fileshare Transfers to AWS: Snowball vs DataSync For multi-terabyte Windows file shares where NTFS metadata (ownership, timestamps, DACL/SACL) must be preserved, prefer AWS DataSync over Direct…
AWS Migration – The all important Pilot Wave (Wave zero or Wave 1)
Pilot Wave – Migration Activities for On-Premises to AWS Pilot Wave – Migration Activities for On-Premises Servers to AWS The following table outlines key activities in the Pilot Wave for…
AWS KMS CMK Centralization
AWS KMS CMK Centralization – Can Keys Be Stored Centrally? Short answer: No, AWS KMS keys (CMKs) cannot be physically stored in a single central account for all workloads to…
Cutover Options for AWS Migration
AWS Migration Cutover Options AWS Migration Cutover Options 1. Traditional Network Cutover (DNS / IP / Routing Shift) This is the standard approach when migrating workloads using replication tools like…
Analyzing Terabytes of VPC Flow Log data – Part 2 – Notes from the field
First read - Analyzing Terabytes of VPC Flow Log Data - part 1 Example Workflow Ingestion and Storage: Configure VPC Flow Logs to send logs to an S3 bucket. Use…